Global default
Choose the provider most forms should inherit.
Open-source WordPress CAPTCHA protection
Calm, configurable CAPTCHA protection for WordPress.
Protect selected WordPress and WooCommerce forms with Cloudflare Turnstile, Google reCAPTCHA, or hCaptcha—without coupling form integrations to individual providers.
Provider neutral
Server-side verification
Per-form overrides
Fail closed
Configuration model
Simple choices, clear responsibilities.
Choose one global default CAPTCHA provider, then override or disable protection for individual forms. Provider credentials and modes remain independent from form selection.
Per-form control
Use the default, select another provider, or disable CAPTCHA.
Provider isolation
Forms do not contain provider-specific implementation branches.
Provider setup
Three providers, one consistent integration model.
Protection foundations
Built around durable boundaries.
Server-side verification
Submitted tokens are treated as untrusted input and verified through provider APIs.
Provider-neutral forms
WordPress integrations depend on shared contracts, not provider branches.
Fail-closed behavior
Protected actions are rejected when verification cannot be completed.
Private credentials
Provider secrets remain server-side and are never rendered into public HTML.
Project status
View form setup →
Release ready.
Provider integrations and supported WordPress and WooCommerce form integrations are implemented and ready for configuration.