Gravity Forms Zero Spam

gravity-forms-zero-spam · By GravityKit
100k+ installs 4.3 (24) Updated 2 months ago v1.10.2 WP 4.7–7.0.8 PHP 7.4+

Impact score

Footprint Score across the two most representative contexts.

1 scans · last scan 2 weeks ago

Compare with another plugin

Homepage Score

Impact measured on the public homepage

···
—

v1.10.2 · 1 scan · Consolidated score over 90 days · 1 versions

Not enough data to publish the grade (15 scans min, currently 1).

What it adds to every page load

Added time
0 ms
Added memory
0.0 MB
SQL queries
+3
CSS/JS files
+0
External calls
0

Admin Score

Impact measured in the WordPress admin

Scan being analyzed. The score will be published once we have enough measurements.

About

Gravity Forms Zero Spam stops spam submissions without CAPTCHAs, checkboxes, or puzzles. Install it, switch it on for a form, and it starts working. Nothing changes for the people filling in your forms.

You get four spam checks. One runs out of the box, and three more are there when you need them:

Run one, or run all four. Every check happens on your own server, and optional summary emails keep you posted on what was caught.

Read more

The plugin adds a signed, time-limited token to your form and checks it on submission. Most spam bots post directly to your site without loading the page or running its JavaScript, so they never pick up a token and their submissions are marked as spam.

No CAPTCHAs, no puzzles, no extra fields, no cookies, and nothing to configure to get started.

Filter submissions against a list you control. Useful when spam keeps arriving from one domain, or when a business enquiry form should not accept free consumer addresses.

Email rejection rules guide

An optional second opinion on submissions the token check has already judged. Two separate tools, both off until you turn them on:

It runs on WordPress 7.0’s built-in AI connectors, so you connect OpenAI, Anthropic, or Google once and every plugin on the site shares it. Zero Spam never stores API keys, and nothing is sent until you opt in. You can write your own instructions, skip fields that collect sensitive data, and cap how many submissions are reviewed per hour.

AI spam review guide

If the free Shield Security plugin is active, its silentCAPTCHA bot detection can act as an additional check, globally or per form. Like the token check it runs server-side and stays invisible to visitors, and if Shield is deactivated or returns an error, submissions are never blocked. Contributed by Shield Security developer Paul Goodchild.

Shield silentCAPTCHA guide

Off by default. Turn them on and you get a summary of how many entries were marked as spam, broken down per form.

Zero Spam does not interfere with other spam-blocking plugins, including Gravity Forms’ own honeypot field and reCAPTCHA integration. Honeypots catch simple bots and reCAPTCHA asks real people to click traffic lights; Zero Spam asks nothing of your visitors at all, and you can layer it on top of either rather than replacing them.

Requires Gravity Forms. That is an affiliate link: if you buy through it we earn a commission, at no extra cost to you.

Read the documentation for setup guides and troubleshooting.

Brought to you by GravityKit. We create essential Gravity Forms Add-Ons.

Description published by GravityKit on WordPress.org, licensed under GPLv2 or later.

Tags
anti-spam captcha gravity forms honeypot spam

Per-version history

Show per-version detail (1 version)

How the plugin evolves version by version.

Version Homepage Admin Last scan
v1.10.2 1 scan — 2 weeks ago

Alternatives in the same category

Other security plugins measured by the community, ranked from lightest to heaviest.

Scan history

Show individual scan log (1 scans)

Date Version Context Score Grade Time Memory
2 weeks ago v1.10.2 Homepage 100/100 A 0 ms 0.0 MB