Protection without unnecessary friction
Rooted Forms combines signed form timing, honeypot checks, rate limiting, duplicate detection, privacy controls, and optional Pro blocklists.
Operational guidance
- Keep WordPress, the theme, and plugins updated.
- Use HTTPS on every form page.
- Collect only information needed for the stated purpose.
- Set an appropriate lead-retention period.
- Review security logs before blocking legitimate visitors.