Runs inside WordPress, on your own server. Fake sign-ups, junk comments, spam messages and fake orders are refused before they reach you. Nothing for your visitors to click.
Then open Rabbitproof in WordPress and press Connect.

Each visitor is checked quietly in the background while they read your page. When a form is sent, spam bots are refused and real visitors go straight through.
Spots automated and headless browsers, the kind spam bots run.
Spots the same machine arriving from different internet connections within seconds.
A connection blocked twice in a day is kept out for 24 hours.
Spots bots that come through home connections, proxies and VPNs.
Machines already caught as bots on other websites Rabbitproof protects are blocked on yours too.
A real visitor is not checked again for 7 days. You can make it 1 or 30.
Works with the forms you already have. Nothing a visitor types is ever sent to Rabbitproof.
Every send is checked on your server, so bots cannot skip the page and post straight to your form.
Bots hunting for the files that hold your settings, passwords, backups and database copies are turned away, and those files are kept off the internet.
Spam bots can't send these forms. Real visitors notice nothing.
Install it like any other plugin. No change to your domain, no code to paste.
No payment method needed to start. Your first 5,000 requests aren't billed.
No. The check runs in the background while they read your page. There are no puzzles or ticks.
Forms go through as normal and your website keeps working. The plugin shows Can't reach Rabbitproof until it's back.
Yes. The check runs in the visitor's browser, so cached pages are fine.
Unblock them on the plugin's Requests tab, and they go straight through for 7 days. Their message is there to read.
In Australian dollars. No GST is charged: Rabbitproof is not registered for GST.