H. Bakhtiari

mentotex

MentoGuard protects your WordPress forms from spam bots using behavioral analysis and server-side token verification — completely GDPR-compliant with no data sent to Google or any third party.
Currently supports Contact Form 7, with more form builders coming in future releases.
<h4>How It Works</h4>
MentoGuard uses three independent protection layers:
<ol>
<li>Signed token — every form load generates a one-time server-side token. Bots submitting without loading the page are instantly blocked.</li>
<li>Page time check — measures time between page load and submission entirely server-side. Bots submit in milliseconds; real users take seconds.</li>
<li>Behavioral score — JavaScript tracks how the visitor interacts with the form (timing, mouse movement, keyboard vs paste, field order) and assigns a spam score.</li>
</ol>
<h4>Key Features</h4>
<ul>
<li>GDPR compliant — zero external servers, zero Google, zero third parties</li>
<li>Contact Form 7 native tag support — place [mentoguard] inside your CF7 form editor</li>
<li>Scripts load only on pages with active forms — zero SEO or page speed impact on other pages</li>
<li>Spam log dashboard — see every blocked submission with IP, score, and signals</li>
<li>Top Spammers page — aggregate view of worst offenders with one-click blacklisting</li>
<li>IP Blacklist — manually block IPs or CIDR ranges</li>
<li>Test Mode — see live spam scores without blocking anyone</li>
<li>Debug Log — step-by-step validation log for diagnosing issues</li>
<li>Preset modes — Relaxed, Balanced, Strict</li>
<li>Page time protection — configurable minimum time in seconds or milliseconds</li>
<li>Fully adjustable — enable/disable each signal, adjust point values</li>
<li>No tracking, no upsells, no phone-home</li>
</ul>
<h4>Privacy</h4>
MentoGuard reads your local WordPress database only. It logs the IP address and behavioral score of blocked submissions. No data is sent to any external server at any time.
<h4>Usage with Contact Form 7</h4>
Add [mentoguard] inside your CF7 form editor, before the submit button:
[text* your-name] 
[email* your-email] 
[mentoguard] 
[submit “Send”]

MentoGuard: Behavioral Spam Blocker for Contact Forms

GDPR-friendly behavioral spam protection for WordPress forms. No Google. No external servers. Zero page speed impact.

GDimitrov

FormShield is a powerful form protection plugin that uses advanced pattern matching, behavioral analysis, and IP tracking to protect your WordPress forms from spam and bots without requiring users to solve annoying captchas.
Key Features:
<ul>
<li>No License Restrictions – Protect unlimited forms for free</li>
<li>No Captcha Required – Seamless user experience</li>
<li>Advanced Bot Detection – Uses pattern matching, behavioral analysis, and IP tracking to identify bots</li>
<li>14 Form Integrations – Works with all major form plugins</li>
<li>Real-time Protection – Blocks spam in real-time</li>
<li>Easy Setup – Works out of the box</li>
<li>Form Location Tracking – See exactly where your forms are located (pages, posts, etc.)</li>
</ul>
Supported Form Plugins:
<ul>
<li>Contact Form 7</li>
<li>Gravity Forms</li>
<li>WPForms</li>
<li>Elementor Forms</li>
<li>Ninja Forms</li>
<li>Formidable Forms</li>
<li>Happy Forms</li>
<li>Fluent Forms</li>
<li>WeForms</li>
<li>WSForm</li>
<li>QuForm</li>
<li>Divi Contact Forms</li>
<li>WordPress Comments</li>
<li>And more coming soon!</li>
</ul>
How It Works:
FormShield analyzes user behavior patterns, content patterns, IP history, email validation, and submission frequency to determine if a submission is from a real human or a bot. This multi-layered approach is more effective than traditional captchas and provides a better user experience.
Privacy & Security:
<ul>
<li>Core spam protection runs entirely on your server — no data is sent offsite</li>
<li>Optional AbuseIPDB integration: if you enter an API key, the submitter’s IP address is sent to api.abuseipdb.com to check its abuse reputation. This is disabled by default and requires a user-configured API key</li>
<li>All other features are fully self-contained</li>
<li>GDPR compliant</li>
<li>No user data collection beyond standard WordPress logging</li>
</ul>
<h3>Privacy</h3>
FormShield’s core spam protection runs entirely on your server. No data is transmitted offsite by default.
Optional AbuseIPDB integration: If you configure an AbuseIPDB API key in Settings, the IP address of each form submitter will be sent to <code>api.abuseipdb.com</code> to check for known abuse. This feature is opt-in and disabled unless you provide a key. See https://www.abuseipdb.com/privacy-policy for their privacy policy.
All other processing — honeypot checks, content analysis, behavioral scoring, rate limiting — happens entirely on your WordPress installation.

FormShield

FormShield protects your forms from bot spam using advanced pattern matching and behavioral analysis. No annoying captchas, unlimited forms.

MentoGuard: Behavioral Spam Blocker for Contact Forms vs FormShield