Spam protection without captchas · hosted in the EU
Your forms, confirmed. Without a single puzzle.
formconfirmed makes automated form spam unattractive: a small proof of work runs invisibly in the visitor's browser, combined with timing and honeypot signals and an optional AI check of the message on our own servers in the EU.
Launching soon. We are opening access step by step – early requests first.
This is what visitors see – a small badge, keyboard accessible, light or dark.
From scan to protection in three steps
Check
formexposed checks your forms from the outside and shows which ones are open to bots.
Turn on
One click from the result: site and keys are created, the guide fits your system – WordPress, another CMS or your own code.
Confirm
The regular scans recognise the widget and mark the form “confirmed by formconfirmed”. If the server-side check is missing, the dashboard tells you.
Protection your visitors do not notice
No puzzles
No images, no audio, no clicking. The check runs in the background in a web worker – usually well under a second.
No cookies, no fingerprinting
Nothing is stored on the device, nothing tracked. That is why the protection needs no consent banner.
AI content check
Judges what is sent – no matter whether a person, a script or an AI agent sends it: SEO offers, link lists, phishing, gibberish. The text is checked in memory only.
Hosted in the EU
All checks and the AI run on servers in the EU, the AI on our own hardware. No transfer to third countries.
Accessible
No interaction needed – no obstacle for screen readers, keyboard or voice control. Good for WCAG and the European Accessibility Act.
Your forms keep working
If our service is unavailable, you decide: let through and flag (default) or block. Availability comes before every extra feature.
Switching from reCAPTCHA takes minutes
One script tag, one element in the form, one call on your server. The answer looks like reCAPTCHA and Turnstile – success, score, error-codes – plus a clear action: allow, flag or block, with reasons.
WordPress: a plugin protects Contact Form 7, WPForms and comments without code.
<script src="https://formconfirmed.com/v1/widget.js" async defer></script>
<form method="post" action="/contact">
...
<div class="fcp-widget" data-sitekey="fcp_pub_..."></div>
</form>
POST https://formconfirmed.com/v1/verify
→ { "success": true, "score": 0.92,
"action": "allow", "reasons": [] }Pricing
The free quota is five times reCAPTCHA's. Above the quota nothing is switched off – checks continue without the AI content check and you get an e-mail.
Free
0 €
- 50,000 checks per month
- No AI content check
- Badge always shown
Pro
Price to follow
- 250,000 checks per month
- AI content check for 25,000 texts
- Badge can be switched off
Business
Price to follow
- 2,000,000 checks per month
- AI content check for 250,000 texts
- Badge can be switched off
One account and one bill with formexposed.
Questions
When can I start?
formconfirmed is running in our test environment and opens step by step. Request early access and tell us which forms you want to protect – we will get in touch as soon as your access is ready.
Does formconfirmed stop every bot?
No – and nobody honest promises that. formconfirmed makes automated submissions expensive and unattractive: every submission costs computing time, comes too fast, falls into the honeypot or reads like spam. Several independent signals together decide, never one alone.
Do I need a consent banner for it?
For formconfirmed itself, no: it sets no cookies, stores nothing on the device and creates no fingerprint. You get a text for your privacy policy with your access.
What data do you process?
The solved task, the time taken to fill in the form, whether the invisible field was filled and – if you switch it on – the message text, which is checked in memory only and not stored. IP addresses are used only shortened and as a daily changing hash.
What happens if your service is down?
The widget notices it and says so in the token; your server lets the submission through and flags it, or blocks it – your choice per site. The code examples and the WordPress plugin handle this out of the box.
How does it relate to formexposed?
formconfirmed is a product of formexposed. formexposed finds unprotected forms; formconfirmed protects them, and the next scan confirms it. Sign-in, account and billing are shared.
Is your contact form protected today?
formexposed checks your form from the outside in about a minute and shows what is missing. Free of charge.
Be among the first to protect your forms
Write to us with your website and the forms you want to protect. We open access step by step and get back to you personally.
Request early accessFree up to 50,000 checks a month. No credit card. · contact@lukaswojcik.com