timh

bostonwebgroup

<p>BWG CF Turnstile integrates Cloudflare’s Turnstile service with Gravity Forms to provide an effective and user-friendly way to block spam and bot submissions. Turnstile is Cloudflare’s privacy-focused alternative to CAPTCHA that offers better user experience while still providing strong protection.</p>
<h3>Features</h3>
<ul>
<li><strong>Automatic Integration</strong>: Adds Turnstile protection to all your Gravity Forms or just the ones you select</li>
<li><strong>Manual Mode</strong>: For custom placement of the Turnstile widget within your forms</li>
<li><strong>Server-Side Validation</strong>: Securely validates submissions with Cloudflare’s API</li>
<li><strong>Theme Compatibility</strong>: Works with all Gravity Forms themes, including Orbital</li>
<li><strong>Easy Setup</strong>: Simple configuration with minimal settings</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>Gravity Forms 2.4 or higher</li>
<li>A Cloudflare account to obtain Turnstile site and secret keys</li>
</ul>
<h3>Privacy Considerations</h3>
<p>Cloudflare Turnstile is designed with privacy in mind. Unlike traditional CAPTCHA services, Turnstile is designed to respect user privacy while still providing effective protection. For more information about Turnstile’s privacy practices, please refer to <a href="https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/" rel="nofollow ugc">Cloudflare’s documentation</a>.</p>
<h3>External Services</h3>
<p>This plugin integrates with Cloudflare Turnstile, an external service provided by Cloudflare. The plugin communicates with Cloudflare’s services for form protection functionality.</p>
<h3>What is Cloudflare Turnstile?</h3>
<p>Cloudflare Turnstile is a privacy-preserving alternative to CAPTCHAs that helps protect forms from bots and automated attacks. It challenges visitors in a way that doesn’t disrupt the user experience.</p>
<h3>When does this plugin connect to Cloudflare?</h3>
<ol>
<li>
<p><strong>JavaScript Widget Loading</strong>: When a page containing a protected Gravity Form is loaded, the plugin loads the Turnstile JavaScript widget from <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code>. This happens on every page load where a protected form is displayed.</p>
</li>
<li>
<p><strong>Token Verification</strong>: When a form is submitted, the plugin sends a verification request to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> to validate the Turnstile token.</p>
</li>
</ol>
<h3>What data is sent to Cloudflare?</h3>
<ol>
<li>
<p><strong>During Widget Loading</strong>:</p>
<ul>
<li>Your site key (public identifier)</li>
<li>Standard browser information (user agent, IP address)</li>
</ul>
</li>
<li>
<p><strong>During Token Verification</strong>:</p>
<ul>
<li>The Turnstile response token</li>
<li>Your secret key (for authentication)</li>
<li>The user’s IP address (optional, for additional validation)</li>
</ul>
</li>
</ol>
<h3>Legal and Privacy Information</h3>
<p>By using this plugin, you agree to Cloudflare’s terms and privacy policies:<br />
– <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a><br />
– <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a><br />
– <a href="https://developers.cloudflare.com/turnstile/" rel="nofollow ugc">Cloudflare Turnstile Documentation</a></p>
<p>It is your responsibility to ensure that your use of this plugin complies with all applicable laws and regulations, including data protection laws in your jurisdiction. We recommend reviewing Cloudflare’s privacy policy and terms of service, and updating your own privacy policy to inform users about the use of Cloudflare Turnstile on your website.</p>


BWG CF Turnstile

Add Cloudflare Turnstile protection to your Gravity Forms to prevent spam and bot submissions.

Opportify

<p><strong>Opportify Fraud Protection</strong> stops fake sign-ups, form spam, bot submissions, and fraudulent leads on every WordPress form. It works silently, in real time, with no friction for real users.</p>
<p><iframe loading="lazy" title="Opportify&apos;s Fraud Protection" src="https://player.vimeo.com/video/1179038954?dnt=1&app_id=122963" width="750" height="422" frameborder="0" allow="autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share" referrerpolicy="strict-origin-when-cross-origin"></iframe></p>
<p>Unlike CAPTCHA, which frustrates genuine visitors and is easily bypassed by modern bots, Opportify works invisibly in the background. It analyzes over 100 signals per submission: behavioral patterns, device fingerprints, email risk, IP reputation, and VPN or proxy detection. Each submission is scored so you can automatically allow, flag, or block it.</p>
<h4>Who This Is For</h4>
<p><strong>WordPress site owners and marketers</strong> tired of spam flooding their contact forms, fake leads cluttering their CRM, or bots registering fake accounts.</p>
<p><strong>WooCommerce store owners</strong> who need to stop fraudulent checkouts, fake account registrations, and disposable email sign-ups before they cause damage.</p>
<p><strong>Developers and agencies</strong> who want an API-backed, code-configurable fraud layer with per-integration control, risk metadata on entries, and support for version-controlled config files.</p>
<p><strong>Security and operations teams</strong> who need explainable risk scores with a per-submission breakdown of every contributing factor.</p>
<h4>Why Not Just Use CAPTCHA?</h4>
<p>CAPTCHA hurts conversion rates for real users and is routinely bypassed by modern bots. Opportify takes a different approach: it observes behavioral signals before the form is even submitted, analyzes every signal at the moment of submission, and delivers a risk verdict your site can act on. All of this happens in under a second, with no puzzles, no friction, and no false positives for legitimate visitors.</p>
<h4>What It Detects</h4>
<ul>
<li>Disposable and temporary email addresses</li>
<li>High-risk and known-fraud email domains</li>
<li>VPN, proxy, Tor exit node, and datacenter IP addresses</li>
<li>Bot and automated browser behavior</li>
<li>Device fingerprint anomalies</li>
<li>Geographic and velocity anomalies</li>
<li>Mismatched or suspicious behavioral signals</li>
</ul>
<h4>Risk Levels</h4>
<p>Every submission receives a score and one of five plain-language risk levels:</p>
<ul>
<li><strong>Lowest</strong> and <strong>Low</strong>: Healthy submissions from genuine users with clean signals.</li>
<li><strong>Medium</strong>: Worth a closer look, but not necessarily fraudulent.</li>
<li><strong>High</strong> and <strong>Highest</strong>: Risky submissions. Likely spam, bots, or fraud. Block or flag automatically.</li>
</ul>
<h4>Per-Integration Actions</h4>
<p>For each supported form plugin, you can independently configure what happens at each risk level:</p>
<ul>
<li><strong>Allow</strong>: The submission proceeds normally.</li>
<li><strong>Flag</strong>: The submission proceeds, but the risk score, level, and contributing factors are saved as metadata visible in WP Admin.</li>
<li><strong>Block</strong>: The submission is rejected with a customizable error message.</li>
</ul>
<h4>Supported Form Integrations</h4>
<ul>
<li>WordPress Comments</li>
<li>WordPress User Registration</li>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a> Checkout</li>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a> Account Registration</li>
<li><a href="https://wordpress.org/plugins/contact-form-7/" rel="ugc">Contact Form 7</a></li>
<li><a href="https://wordpress.org/plugins/wpforms-lite/" rel="ugc">WPForms</a></li>
<li><a href="https://www.gravityforms.com/" rel="nofollow ugc">Gravity Forms</a></li>
<li><a href="https://elementor.com/" rel="nofollow ugc">Elementor Pro Forms</a></li>
<li><a href="https://wordpress.org/plugins/ninja-forms/" rel="ugc">Ninja Forms</a></li>
<li><a href="https://wordpress.org/plugins/fluentform/" rel="ugc">Fluent Forms</a></li>
<li><a href="https://wordpress.org/plugins/forminator/" rel="ugc">Forminator</a></li>
<li><a href="https://wordpress.org/plugins/formidable/" rel="ugc">Formidable Forms</a></li>
<li><a href="https://wordpress.org/plugins/mailchimp-for-wp/" rel="ugc">Mailchimp for WordPress</a> (MC4WP)</li>
</ul>
<h4>Supported Newsletter and CRM Integrations</h4>
<ul>
<li><a href="https://wordpress.org/plugins/mailin/" rel="ugc">Brevo</a> (formerly Sendinblue)</li>
<li><a href="https://wordpress.org/plugins/email-subscribers/" rel="ugc">Email Subscribers</a></li>
<li><a href="https://wordpress.org/plugins/fluent-crm/" rel="ugc">FluentCRM</a></li>
<li><a href="https://wordpress.org/plugins/convertkit/" rel="ugc">Kit</a> (formerly ConvertKit)</li>
<li><a href="https://wordpress.org/plugins/mailerlite-official/" rel="ugc">MailerLite</a></li>
<li><a href="https://wordpress.org/plugins/mailpoet/" rel="ugc">MailPoet</a></li>
<li><a href="https://wordpress.org/plugins/newsletter/" rel="ugc">Newsletter</a></li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Real-time fraud and spam detection on every form submission</li>
<li>Client-side behavioral fingerprinting via the Opportify JS SDK (loads automatically, no configuration needed)</li>
<li>Server-side AI analysis via the Opportify Fraud Protection API</li>
<li>5-level risk scoring with explainable contributing factors</li>
<li>Per-integration configuration: set different rules for contact forms, registrations, and checkouts independently</li>
<li>Reports dashboard with risk distribution charts, submission log, and health checklist</li>
<li>Risk metadata columns in WP Comments, Users, and WooCommerce Orders list tables</li>
<li>Config file support (<code>opportify-config.php</code>) for DevOps, Bedrock, Trellis, and staging pipelines</li>
<li>Skip admins option to avoid false positives during development and testing</li>
<li>Automatic log cleanup via WP-Cron (configurable retention, default 30 days)</li>
<li>Compatible with WP Rocket, LiteSpeed Cache, W3 Total Cache, Autoptimize, and other caching plugins</li>
<li>Translated into 10 languages: German, Spanish, French, Italian, Japanese, Dutch, Polish, Portuguese (Brazil), Russian, and Simplified Chinese</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>The Opportify JS SDK loads silently in your site header. It collects behavioral signals such as mouse movement, keystroke timing, scroll depth, and device entropy, then generates a session fingerprint.</li>
<li>When a form is submitted, the SDK attaches a behavioral token to the submission automatically.</li>
<li>The Opportify PHP SDK sends the submission to the Fraud Protection API for analysis: email risk, IP intelligence, device signals, behavioral correlation, and more.</li>
<li>Based on your configured thresholds, the plugin allows, flags, or blocks the submission instantly.</li>
</ol>
<p>No CAPTCHA. No user friction. No separate configuration per form.</p>
<h4>Reports Dashboard</h4>
<p>The plugin’s Reports page gives you a clear view of your site’s submission health:</p>
<ul>
<li><strong>Health checklist</strong>: confirms your API keys, connection status, and active integrations at a glance</li>
<li><strong>Risk distribution chart</strong>: donut chart showing the split between Healthy, Caution, and Risky submissions</li>
<li><strong>Submissions by integration</strong>: bar chart showing which forms receive the most risk</li>
<li><strong>Submission log</strong>: filterable table with date, integration, email, IP, score, risk level, action taken, and contributing factors</li>
<li><strong>Dashboard link</strong>: access detailed trend analysis and advanced filters in the Opportify Dashboard</li>
</ul>
<h4>External Services</h4>
<p>This plugin connects to two Opportify services:</p>
<ul>
<li><strong>Fraud Protection API</strong> (<code>https://api.opportify.ai</code>): analyzes each submission server-side using your private API key. Data sent: email address, IP address, and behavioral signals from the JS SDK.</li>
<li><strong>JS SDK CDN</strong> (<code>https://cdn.opportify.ai</code>): loads the client-side behavioral telemetry script using your public key. This script collects behavioral signals (typing cadence, mouse movement, device entropy, and automation indicators) that are correlated server-side with the fraud analysis. The plugin automatically fetches the latest script version from the CDN manifest and injects it into your site header.</li>
</ul>
<p>Please review <a href="https://www.opportify.ai/legal/privacy-policy" rel="nofollow ugc">Opportify’s Privacy Policy</a> and <a href="https://www.opportify.ai/legal/terms-conditions" rel="nofollow ugc">Terms of Service</a> before activating the plugin. By activating, you agree to the transmission of submission data to Opportify’s API for fraud analysis.</p>
<h3>Support</h3>
<p>For questions, feedback, or assistance, visit <a href="https://www.opportify.ai/contact-us" rel="nofollow ugc">https://www.opportify.ai/contact-us</a>.</p>


Opportify Fraud Protection

Stop fake leads, form spam, and bot registrations before they reach your database. AI-powered fraud scoring across 100+ signals. No CAPTCHA required.

BWG CF Turnstile vs Opportify Fraud Protection