Aneesh MK

Cybernob Turnstile for Cloudflare integrates <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> into your WordPress site — the privacy-friendly CAPTCHA that stops bots silently, without making real users solve puzzles.
This plugin is an independent, third-party integration and is not affiliated with or endorsed by Cloudflare, Inc.
<h4>Protected locations</h4>
<ul>
<li>Login form — blocks brute-force and credential-stuffing attacks</li>
<li>Registration form — prevents automated account creation</li>
<li>Comment form — stops spam comments without Akismet</li>
<li>Contact Form 7 — automatically protects every CF7 form on your site</li>
</ul>
<h4>Features</h4>
<ul>
<li>Live status checker — the settings page shows instantly whether your API keys are valid and reachable</li>
<li>Invisible mode — widget stays hidden; the form auto-submits once the challenge passes silently</li>
<li>Three themes — Auto (follows system preference), Light, Dark</li>
<li>Two appearance modes — Always visible, or show on interaction only</li>
<li>Clean uninstall — all plugin options are removed on deletion, including multisite support</li>
<li>Translation ready — all strings wrapped in i18n functions with the correct text domain</li>
<li>No bundled libraries — only Cloudflare’s own CDN script is used; nothing extra added to your site</li>
</ul>
<h4>Why Turnstile?</h4>
Unlike reCAPTCHA, Cloudflare Turnstile does not track users across sites or require Google accounts. It is designed to be GDPR-friendly and invisible to legitimate users by default.
<h4>Getting started</h4>
<ol>
<li>Create a free <a href="https://dash.cloudflare.com/?to=/:account/turnstile" rel="nofollow ugc">Cloudflare Turnstile</a> site widget</li>
<li>Copy your Site Key and Secret Key</li>
<li>Paste them into Settings → Cybernob Turnstile and save</li>
<li>The live status indicator confirms everything is working</li>
</ol>
<h3>External Services</h3>
This plugin connects to Cloudflare’s Turnstile service to display CAPTCHA challenges and verify user responses.
<ul>
<li>Service: Cloudflare Turnstile</li>
<li>When used: When a protected form is loaded (widget script) or submitted (token verification). Only active after the administrator has entered API keys in the plugin settings.</li>
<li>Data sent: On verification — the Turnstile response token and the visitor’s IP address are sent to Cloudflare’s API endpoint.</li>
<li>Endpoint: https://challenges.cloudflare.com/turnstile/v0/siteverify</li>
</ul>
<a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a>

Cybernob Turnstile for Cloudflare

Lightweight Cloudflare Turnstile CAPTCHA protection for WordPress login, registration, comments, and Contact Form 7.

Cybernob Turnstile for Cloudflare vs Simple CAPTCHA Alternative with Cloudflare Turnstile