All fix guides

Lead forms (B11)

Spam / captcha

What this check means

This guide helps you act on one scan finding. It is not legal advice or a compliance verdict.

What to fix

Spam / CAPTCHA controls are environment-specific. A safe self-serve “turn it off” guide would either weaken production or invent a host path we cannot see from here.

This one needs a developer

Choosing between reCAPTCHA, hCaptcha, Turnstile, Cloudflare Bot Fight, and plugin honeypots needs access to your exact stack. Ask a developer (or a HandL care plan) to add a QA path that keeps production protection intact.

See WordPress care plans

Confirm it is fixed

After a developer adds a documented QA path (test keys, allowlist, or staging twin), re-scan the form journey to confirm spam controls no longer block verification.

Rescan this check on your site

Scan the same URL again, then compare this check with your previous report.

Run a free leak scan