MAD CAT Design® Forms Protection
MAD CAT Design® Forms Protection is a privacy-conscious, standalone form protection plugin for WordPress. It protects contact forms and lead forms without forcing visitors through intrusive captcha challenges and without requiring an external verification service. The core protection flow runs local
MAD CAT Design® Forms Protection is a privacy-conscious, standalone form protection plugin for WordPress. It protects contact forms and lead forms without forcing visitors through intrusive captcha challenges and without requiring an external verification service.
The core protection flow runs locally inside WordPress. It does not require Google reCAPTCHA, Cloudflare Turnstile or another third-party captcha provider. This makes the plugin especially useful for GDPR-conscious websites that want to reduce external dependencies and avoid sending visitor interaction data to external anti-spam services.
Instead of relying on one simple honeypot field, the plugin uses a modular, signal-based protection model. It combines server-side validation, form state checks, timing signals, honeypot fields, behavioral indicators and integration-specific context. These signals are scored together, so automated submissions can be evaluated more accurately than with a single check alone.
The plugin is lightweight and performance-conscious. The protection logic is handled locally in WordPress and does not add heavy frontend dependencies or external captcha requests to your forms.
The free core plugin includes the shared protection engine, base signal checks, honeypot checks, Contact Form 7 integration and an admin log view. Additional integrations and advanced policy controls can be added through separate extension plugins.
Key Features
- Privacy-conscious form protection for WordPress.
- Standalone local protection flow without external captcha services.
- No Google reCAPTCHA or third-party verification service required.
- Contact Form 7 integration included in the free plugin.
- Multi-signal scoring for timing, form state, behavior and submission context.
- Honeypot checks combined with behavioral and request-context analysis.
- Server-side validation inside WordPress.
- Structured logs for reviewing blocked and accepted submissions.
- Configurable log retention and maintenance actions.