Keep bots off your forms, booking pages and chat

Every form, booking page and chat widget has invisible traps for bots: a hidden field people never see, a check on how fast a form was filled in, and a limit on how much one visitor can send. Bots that trip them are quietly ignored, and real visitors never notice anything.

When bots get through in numbers

Solstral counts what its traps catch. If, in one hour, at least 20 submissions to the same form, booking page or chat widget come from bots and they outnumber real visitors, it starts asking visitors to prove they're human with Cloudflare Turnstile for the next 24 hours, and your admins are told. Turnstile usually decides by itself without asking anything; only when it isn't sure does it show a quick check. On a chat widget it runs just before a visitor's first message.

Choose for each one

Each form (Settings ▸ Spam protection), booking page (Bot protection) and chat widget (Bot protection) has Ask visitors to prove they're human:

• Only while it's under attack: the default, as above.
• Always: every visitor gets the check.
• Never: the invisible traps only, even during an attack.