BOT PROTECTION & SPAM PREVENTION

Stop bots, without bothering humans.

Are you losing real respondents to "click all the traffic lights" reCAPTCHA puzzles?
Repoan combines honeypot + Cloudflare Turnstile + IP rate limiting — bots stop without showing respondents anything.

Start free How protection works

No credit card required · Bot protection ships on every plan

機能 reCAPTCHA / Google Forms Repoan
No image-puzzle CAPTCHA shown to respondents
Bot auto-fill detection (honeypot)
IP-based rate limiting
Cloudflare Turnstile (silent verification)
Extra steps for the respondent Image-click required None
Impact on completion rate Drops No impact
Setup work Site key issuing, etc. On by default

reCAPTCHA isn't needed anymore.

The era of bothering respondents with image puzzles is over. Repoan stops bots silently and protects human completion rate.

Honeypot field detection

A trap field invisible to humans is placed in the form. Bots fill every field automatically, so a filled trap = bot. Respondents never see anything; bots are blocked silently.

Built in

Cloudflare Turnstile (silent)

No image-click puzzles like reCAPTCHA. The moment the page loads, Cloudflare validates the browser in the background. Respondents don't even see verification running.

Built in

IP-based rate limiting

Auto-block bursts of submissions from the same IP. Prevent bot-army attacks and malicious manual flooding. Per-IP control means normal use is unaffected.

Built in

Preserve human completion rate

reCAPTCHA is reported to drop completion rate by 5–10%. Repoan's three layers show respondents nothing, so there is no drop-off. The form's purpose — lead capture, survey collection — is not compromised.

UX first

Zero-config, on by default

No site key issuance, no script embedding, no server-side validation implementation. The moment you publish a form on Repoan, every layer of bot protection is on.

Zero setup

Server-side double-check

Bot protection isn't client-only — server-side validation runs too. Bots that spoof only the client-side check are caught. Multiple defense layers stand between attackers and your response API.

Defense in depth

Use cases for bot-attacked forms.

Ad-driven inquiry forms

Forms that receive search and social ad traffic are popular bot targets. Repoan blocks bot spam without setup so ad budget isn't consumed by junk leads.

Media / blog comments and submissions

Block automated spam injection on comment forms and reader-submission forms. Massively cut the manual moderation overhead.

Hiring entry / application forms

Hiring forms occasionally receive nuisance bot submissions. Repoan removes the recruiter's job of filtering out fakes.

Nonprofit / government inquiries

Public-sector and nonprofit forms attract attacks while reCAPTCHA punishes their user base. Silent verification lets anyone respond.

E-commerce inquiries

Filter out spam mixed into product-inquiry forms so the CS team handles only "real human inquiries."

Seminar / event registration

Free-seminar registration forms are particularly bot-targeted. Prevent fake names from cluttering the day-of attendee list.

Zero setup bot protection.

1

Just build the form

Tell AI the goal and build the form. No additional setup or design for bot protection.

2

Protected on publish

The moment the form goes live, all three layers — honeypot, Turnstile, IP limiting — are on.

3

Bot submissions never arrive

Bot submissions don't reach your dashboard. You see only "responses from humans."

Frequently Asked Questions

How does the accuracy compare to reCAPTCHA?

Cloudflare Turnstile is published as matching or exceeding reCAPTCHA v3 in bot-detection accuracy. Repoan combines it with honeypot and IP limiting for defense in depth, which is more robust than relying on a single method. The design achieves both "no image puzzles" and high accuracy.

Will respondents see a CAPTCHA or checkbox?

Normally nothing is shown. Cloudflare Turnstile runs in the background and human respondents don't notice verification is happening. For extremely suspicious access, additional verification may run.

Will IP rate limiting affect normal use?

Normal use is unaffected. The block thresholds target "dozens of submissions per minute per IP" — bot-attack territory. Humans answering several forms aren't hit. Only attacks at hundreds-per-second hit the limiter.

Can bot protection be disabled?

For normal operations we recommend keeping bot protection on. For specific test scenarios that require disabling it, contact us.

What if spam slips through?

In the rare case spam reaches the dashboard, delete it individually from the responses screen. If the same IP / pattern repeats, contact support and we'll tune additional detection patterns.

Is bot protection available on the free plan?

Yes. Bot protection ships on every plan. Free-plan forms get all three layers — honeypot, Turnstile, IP limiting — on by default.

Only human responses arrive.

Drop reCAPTCHA. Don't bother respondents; stop bots. With Repoan, it's on the moment you publish.

Start free

No credit card required · Bot protection ships on every plan