Free tool

Spam protection tester

Check how well your form keeps bots out, and test any message against Formpit's real spam filter to see whether it would be caught, and why.

Runs the same checks as Formpit's live filter: honeypot, link floods, spam phrases, empty and garbage text, and your own blocked words.

Name Email Message Your blocked words Simulate a bot filling the hidden honeypot

Paste your form's HTML. Checked in your browser; nothing is sent.

Form HTML

How form spam is usually stopped

A honeypot: a hidden field people never see. Bots fill every field, so a filled honeypot means a bot. Free, invisible, and catches most simple bots.
Rate limiting: refusing bursts from one address. Formpit allows 10 submissions per address per form every 10 minutes.
Content checks: link floods, known spam phrases, empty or garbage text, and your own blocked words.
A captcha (hCaptcha, reCAPTCHA or Turnstile) for forms that attract determined bots. It adds a step for people, so add it when the others aren't enough.