One drag for people. Several traps for bots.
Form Armour adds a short slider to the WordPress forms you choose. Behind it, your server runs seven checks on every submission before anything is sent or saved.
No annoying image puzzles. No API keys. No subscriptions.
Free plugin. Pro trial available.
Get in touch
Complete verification before submitting.
Works with Contact Form 7, WPForms, Gravity Forms, Fluent Forms, Elementor Pro and forms you build yourself.
One drag, not a puzzle.
Image puzzles make people prove themselves to a machine. Form Armour asks for something anyone can do, then does the hard work where visitors never see it.
The usual way
Every visitor is asked to pass a test, and sometimes to try again before their message goes through.
With Form Armour
One short drag. It works with a mouse, a thumb or a keyboard, and you can add a button for anyone who cannot drag.
Complete verification before submitting.
What happens after the drag.
While the visitor fills in the form, their browser quietly solves a small puzzle. The slider trades it for a signed ticket. When the form is sent, your server checks it in this order, and stops at the first thing that is wrong. Step through three visitors to watch.
Visitor 1 of 3
A real person
Fills in the form, drags the slider and presses send. Their browser solved the puzzle while they typed.
Not run yet
A form-filling bot
Fills in every field it can find, including the hidden one people never see.
Not run yet
A flood from one address
Sends submission after submission from the same address.
Not run yet
Incoming submission, Contact form 1
- 01Within the limit for this address
- 02Hidden field left empty
- 03Ticket signed by your site, for this form
- 04Not sent too fast, ticket under five minutes old
- 05Sent from the browser that earned it
- 06Slider completed in the browser
- 07Ticket never used before
Waiting for the submission.
Private by design. Honest about its limits.
Form Armour checks every submission on your own server. Nothing personal is stored, nothing is sent elsewhere, and its limits are stated up front.
Nothing personal is kept
No form contents and no raw IP addresses are stored. Daily pass and block counts are kept for 7 to 90 days, your choice.
No outside service
Local mode runs entirely on your own server. There are no keys to create and no other company in the loop.
Honest about its limit
The slider slows and stops many bots, but for complete protection, Pro adds Cloudflare Turnstile, still verified on your server, to stop almost all of them in their tracks.
Works on HTTP and HTTPS sites with nothing to set up on your server. Needs first-party cookies and JavaScript in the visitor's browser. WordPress 6.9 or later, PHP 7.4 or later. Licensed GPLv2 or later.
Make it look like yours.
The slider should feel like part of your site, not a guest on it. Everything below is on the Appearance screen in WordPress, with a live preview beside it. Try it here.
On Free, you set the accent, background and text colours to match your theme. The default is blue. Pro adds five one-click presets, plus separate colours for success and errors.
A soft card, an outline or no card at all. A rounded, circular or square handle, anywhere from 44 to 88 pixels tall. Taller is easier on phones.
Every word a visitor sees can be changed, from the slider label to the message after a failed check. Type here and drag the slider.
A pop-up keeps long forms tidy. The slider stays out of sight until the visitor presses send, then the form goes as soon as they pass.
Complete verification before submitting.
Please verify to continue
Free stops the spam. Pro gives you more control and an audit trail.
Pro is for forms that draw targeted abuse, and for sites that want each form styled and measured.
Free
$0
For any WordPress site that wants form spam stopped.
- Local protection on every supported form plugin and your own forms
- Signed single-use tickets, a background puzzle, a minimum fill time, a hidden field, replay protection and per-address limits
- Slider colours, shape, size, alignment and pop-up display
- Every visitor-facing message
- Optional paste blocking per form
Pro
$24.99USD one-time, 1 site
or $49.99 USD one-time for up to 3 sites
For forms that attract targeted abuse, and studios that care about the details.
- Everything in Free
- Cloudflare Turnstile mode, still verified on your server
- Per-form styling, theme presets, handle icons, drag-trail, success and error colours
- Stats dashboard with a daily chart and CSV export
- Priority email support
Or start a free 3-day trial. You can also start inside Form Armour.
Questions.
The full setup guides are in the documentation.
Does it work without Cloudflare?
Yes. Local mode needs no keys or outside service. Turnstile mode, in Pro, adds Cloudflare's bot check on top.
What about visitors who cannot drag?
Turn on the "Verify without dragging" button. It runs the same checks. The slider also works with a keyboard.
Every submission fails. Why?
Usually the challenge endpoint is being cached, or the form posts to a different address from your site. Visitors also need first-party cookies and JavaScript turned on. The Help tab on any Form Armour screen has more.
How do I protect a form I built myself?
Register it on the Forms screen, put [form_armour id="your-id"] inside the form, and call form_armour_validate('your-id') in your submission handler before sending or saving anything.
The shortcode alone does not protect the endpoint. The handler check is what stops the submission.
My form loads in a pop-up or by AJAX.
Add add_filter('hfg_always_enqueue', '__return_true'); so the scripts load on every page.
Does it slow my pages down?
Its scripts and styles load only on pages with a protected form, unless you turn that filter on.
How does the Pro trial work?
You get three days of everything in Pro. No card is needed to start it.
What happens when the trial ends?
Your site goes back to Free. Forms set to Turnstile fall back to Local protection, so they stay protected.
Can I get a refund?
Pro comes with a 7-day money-back guarantee. You pay once, so there is no subscription to cancel. See the refund policy.
Put it on one form today.
Install the free plugin, choose Local on a form, then send yourself a test message.
Download freeFree plugin. Pro trial available.