AI spam protection for forms — no CAPTCHA

Every submission gets a score from 0 to 100 and a readable reason. The heuristic pass looks at the things bots get wrong — a filled honeypot field, disposable email domains, link floods, excessive uppercase, repeated-character runs, blocklisted terms, a scripted or missing user agent, a request with no origin or referer — and adds up what it finds; at 50 or above the submission is marked spam. On Starter, submissions the heuristics cannot decide are handed to an AI model with your form's description as context; on Pro and Business the model reads every submission. Spam is still stored, with its score and reason, so you can review it in the dashboard instead of wondering what was dropped.

There are no rules to write and no threshold to tune. Filtering is a per-form switch, and the honeypot is a hidden `_honey` field you add to the form yourself — a bot fills it, a person never sees it.