StaticFormSpamShieldKit: stop contact-form spam without losing real leads
StaticFormSpamShieldKit is a free, read-only check with 7 automated tests: Enter a page with a contact or lead form. We read each form's markup (never submit it) and check for a honeypot field, a CAPTCHA such as Cloudflare Turnstile, hCaptcha or reCAPTCHA, a CSRF token, an HTTPS action endpoint, the form backend in use, email field type and autocomplete, and exposed mailto: addresses that attract scrapers. The kit includes a hardened copy-paste form. Results are instant; copy-paste fixes and monitoring start at $4.99. It is also available to AI agents as the MCP tool audit_contact_form_securit
Enter a page with a contact or lead form. We read each form's markup (never submit it) and check for a honeypot field, a CAPTCHA such as Cloudflare Turnstile, hCaptcha or reCAPTCHA, a CSRF token, an HTTPS action endpoint, the form backend in use, email field type and autocomplete, and exposed mailto: addresses that attract scrapers. The kit includes a hardened copy-paste form.
Unlock the complete deliverable
Your free check above is complete. The fix pack adds a copy-paste fix for every item that needs attention. The first 3 are below, free.
Tailor unlock for:
Card, Apple Pay, Google Pay or Link via Stripe; refunds on request within 14 days.
✓ Read-only, live public data · Key and unlock right after payment · Card, Apple Pay, Google Pay or Link via Stripe · Refunds on request within 14 days
Preview what the unlock includes
- A copy-paste fix for every check that needs attention, written for your page
- Where each fix goes (page HTML, server headers or DNS) and how to confirm it
- Re-run the free check any time to verify
Already paid? Enter your key or email to unlock
Passive: one request for the page; forms are read from the HTML and never submitted. Forms rendered only by JavaScript may not be visible.
Plans
Full form security Report
$4.99 one-time
- One-time $4.99: the full form security report and export for one target
- Unlocked instantly with your key
Monitor (10 pages)
$19 / month ($0.62/day)
- Daily re-check of up to 10 pages. Billed monthly (or yearly at the annual price); cancel any time
- Change log on your watch dashboard and API, plus email alerts on changes
Monitor Pro (50 pages)
$49 / month ($1.61/day)
- Daily re-check of up to 50 pages. Billed monthly (or yearly at the annual price); cancel any time
- Change log, CSV export and API access
More ways to buy
500 API / MCP Credits
$9.99 one-time
- 500 full (unredacted) REST or MCP calls across every product
- Credits never expire
Unlimited API / MCP Key
$29 / month
- Unlimited full REST and MCP calls across every product. Billed monthly (or yearly at the annual price); cancel any time
- For Make, Zapier, n8n and AI agents
Watch My Domain
$5 / month
- Weekly read-only re-check of one domain. Billed monthly (or yearly at the annual price); cancel any time
- Email when the result changes
White-Label Client Report
$9.99 one-time
- One downloadable client-ready HTML report with your agency name and domain in the header
- No branding from us
Agency White-Label Pass
$79 / month
- Unlimited white-label client reports for this tool. Billed monthly (or yearly at the annual price); cancel any time
API: 10 free calls per day without a key. Datasets contain public records only, at organization level.
Payments are processed securely by Stripe. Refunds are available by default within the first 14 days of paid service.