Aneesh MK

<p><strong>Cybernob Turnstile for Cloudflare</strong> integrates <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> into your WordPress site — the privacy-friendly CAPTCHA that stops bots silently, without making real users solve puzzles.</p>
<p>This plugin is an independent, third-party integration and is not affiliated with or endorsed by Cloudflare, Inc.</p>
<h4>Protected locations</h4>
<ul>
<li><strong>Login form</strong> — blocks brute-force and credential-stuffing attacks</li>
<li><strong>Registration form</strong> — prevents automated account creation</li>
<li><strong>Comment form</strong> — stops spam comments without Akismet</li>
<li><strong>Contact Form 7</strong> — automatically protects every CF7 form on your site</li>
</ul>
<h4>Features</h4>
<ul>
<li><strong>Live status checker</strong> — the settings page shows instantly whether your API keys are valid and reachable</li>
<li><strong>Invisible mode</strong> — widget stays hidden; the form auto-submits once the challenge passes silently</li>
<li><strong>Three themes</strong> — Auto (follows system preference), Light, Dark</li>
<li><strong>Two appearance modes</strong> — Always visible, or show on interaction only</li>
<li><strong>Clean uninstall</strong> — all plugin options are removed on deletion, including multisite support</li>
<li><strong>Translation ready</strong> — all strings wrapped in i18n functions with the correct text domain</li>
<li><strong>No bundled libraries</strong> — only Cloudflare’s own CDN script is used; nothing extra added to your site</li>
</ul>
<h4>Why Turnstile?</h4>
<p>Unlike reCAPTCHA, Cloudflare Turnstile does not track users across sites or require Google accounts. It is designed to be GDPR-friendly and invisible to legitimate users by default.</p>
<h4>Getting started</h4>
<ol>
<li>Create a free <a href="https://dash.cloudflare.com/?to=/:account/turnstile" rel="nofollow ugc">Cloudflare Turnstile</a> site widget</li>
<li>Copy your <strong>Site Key</strong> and <strong>Secret Key</strong></li>
<li>Paste them into <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Cybernob Turnstile</strong> and save</li>
<li>The live status indicator confirms everything is working</li>
</ol>
<h3>External Services</h3>
<p>This plugin connects to Cloudflare’s Turnstile service to display CAPTCHA challenges and verify user responses.</p>
<ul>
<li><strong>Service:</strong> Cloudflare Turnstile</li>
<li><strong>When used:</strong> When a protected form is loaded (widget script) or submitted (token verification). Only active after the administrator has entered API keys in the plugin settings.</li>
<li><strong>Data sent:</strong> On verification — the Turnstile response token and the visitor’s IP address are sent to Cloudflare’s API endpoint.</li>
<li><strong>Endpoint:</strong> https://challenges.cloudflare.com/turnstile/v0/siteverify</li>
</ul>
<p><a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a></p>


Cybernob Turnstile for Cloudflare

Lightweight Cloudflare Turnstile CAPTCHA protection for WordPress login, registration, comments, and Contact Form 7.

timh

bostonwebgroup

<p>BWG CF Turnstile integrates Cloudflare’s Turnstile service with Gravity Forms to provide an effective and user-friendly way to block spam and bot submissions. Turnstile is Cloudflare’s privacy-focused alternative to CAPTCHA that offers better user experience while still providing strong protection.</p>
<h3>Features</h3>
<ul>
<li><strong>Automatic Integration</strong>: Adds Turnstile protection to all your Gravity Forms or just the ones you select</li>
<li><strong>Manual Mode</strong>: For custom placement of the Turnstile widget within your forms</li>
<li><strong>Server-Side Validation</strong>: Securely validates submissions with Cloudflare’s API</li>
<li><strong>Theme Compatibility</strong>: Works with all Gravity Forms themes, including Orbital</li>
<li><strong>Easy Setup</strong>: Simple configuration with minimal settings</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>Gravity Forms 2.4 or higher</li>
<li>A Cloudflare account to obtain Turnstile site and secret keys</li>
</ul>
<h3>Privacy Considerations</h3>
<p>Cloudflare Turnstile is designed with privacy in mind. Unlike traditional CAPTCHA services, Turnstile is designed to respect user privacy while still providing effective protection. For more information about Turnstile’s privacy practices, please refer to <a href="https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/" rel="nofollow ugc">Cloudflare’s documentation</a>.</p>
<h3>External Services</h3>
<p>This plugin integrates with Cloudflare Turnstile, an external service provided by Cloudflare. The plugin communicates with Cloudflare’s services for form protection functionality.</p>
<h3>What is Cloudflare Turnstile?</h3>
<p>Cloudflare Turnstile is a privacy-preserving alternative to CAPTCHAs that helps protect forms from bots and automated attacks. It challenges visitors in a way that doesn’t disrupt the user experience.</p>
<h3>When does this plugin connect to Cloudflare?</h3>
<ol>
<li>
<p><strong>JavaScript Widget Loading</strong>: When a page containing a protected Gravity Form is loaded, the plugin loads the Turnstile JavaScript widget from <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code>. This happens on every page load where a protected form is displayed.</p>
</li>
<li>
<p><strong>Token Verification</strong>: When a form is submitted, the plugin sends a verification request to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> to validate the Turnstile token.</p>
</li>
</ol>
<h3>What data is sent to Cloudflare?</h3>
<ol>
<li>
<p><strong>During Widget Loading</strong>:</p>
<ul>
<li>Your site key (public identifier)</li>
<li>Standard browser information (user agent, IP address)</li>
</ul>
</li>
<li>
<p><strong>During Token Verification</strong>:</p>
<ul>
<li>The Turnstile response token</li>
<li>Your secret key (for authentication)</li>
<li>The user’s IP address (optional, for additional validation)</li>
</ul>
</li>
</ol>
<h3>Legal and Privacy Information</h3>
<p>By using this plugin, you agree to Cloudflare’s terms and privacy policies:<br />
– <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a><br />
– <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a><br />
– <a href="https://developers.cloudflare.com/turnstile/" rel="nofollow ugc">Cloudflare Turnstile Documentation</a></p>
<p>It is your responsibility to ensure that your use of this plugin complies with all applicable laws and regulations, including data protection laws in your jurisdiction. We recommend reviewing Cloudflare’s privacy policy and terms of service, and updating your own privacy policy to inform users about the use of Cloudflare Turnstile on your website.</p>


BWG CF Turnstile

Add Cloudflare Turnstile protection to your Gravity Forms to prevent spam and bot submissions.

Cybernob Turnstile for Cloudflare vs BWG CF Turnstile