Hushfort
Menu

Integrations

Works with the tools you already run.

No extra accounts, nothing to sign up for. Hushfort detects these plugins and services on your site and protects them where they meet visitors.

Free in the free pluginPro needs Hushfort Pro

Form plugins Pro

With Hushfort Pro, Anti-Spam protects forms built with these plugins. Nothing to add to each form, no CAPTCHA for your visitors.

Stop form spam without CAPTCHA

  • Elementor Pro Forms

  • Contact Form 7

  • WPForms

  • Gravity Forms

  • Fluent Forms

  • Forminator

  • Invisible honeypot, minimum fill time and signed tokens that survive page caching
  • Per-IP and per-email limits, disposable-email list (~9,900 domains), block lists, link and word filters, quarantine with "Not spam"

WooCommerce

Built for stores. No layer ever blocks a checkout: checkout requests and payment callbacks pass even for a rate-limited IP.

Stop fake user registrations

  • Product reviews

    Free

    Invisible honeypot and fill-time check in Free; set reviews to Protected, Closed or Untouched, separately from post comments. Pro adds the full Anti-Spam rules.

  • Registration

    Pro

    Invisible honeypot on the WooCommerce registration form, hourly limits and a site-wide ceiling.

  • Checkout

    Never blocked. Suspicious accounts created during payment are held for review instead.

Page caching

LiteSpeed Cache and other page caches. Bot tokens are fetched by a tiny script (about 2 KB, no dependencies, no cookies), not baked into cached HTML, so cached pages keep their protection.

Troubleshooting: page caching

  • Cache-aware form tokens

    Pro

    Form tokens work with full-page caching. If forms stop right after you switch caching on, clear the cache once.

Cloudflare

Hushfort reads the visitor's real IP from proxy headers only when the request really comes from Cloudflare or a private network, so a forged header can't dodge a limit.

A plugin cannot stop a network-level DDoS. Cloudflare is the real shield there; Hushfort tells you which layer is protecting you.

Block fake Googlebot and bad bots

  • Real visitor IPs behind the proxy

    One IP truth shared by every layer.

  • Emergency mode

    Pro

    Optional: add your own Cloudflare API key and Flood & Fake-Bot Guard can switch "Under Attack" mode on during a flood, and back off afterwards. The key is used only to switch the security level.

WP-CLI

Run Declutter from the command line, for scripts and many sites.

Find unused WordPress plugins

  • wp hushfort declutter

    Pro

    Lists plugins and themes that are installed but do nothing. Options: --format=json, --skip-pages.

Using a form plugin that isn't listed here? Ask us at [email protected] before you buy.