Add hCaptcha, Honeypot, Redirection, and AI-powered form generation to Contact Form 7.
- Installs
- 300,000+
- Rating
- 3.8 (135)
- Updated
- 2 days ago
Gravity Forms Zero Spam
Block form spam in Gravity Forms with an invisible token check, email rejection rules, and optional AI review. No CAPTCHAs for your visitors.
- Active installs
- 100,000+
- #453 of 1,000
- Downloads, all time
- 1.6M
- 1,601,269
- Downloads, 30 days
- 14.4K
- 3.3K in the last 7
- Rating
- 4.3 / 5
- 24 reviews
- Last updated
- 2 months ago
- Sep 1, 2026
- Version
- 1.10.2
- 40 releases
Upkeep and compatibility
| Last updated | September 1, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.0.8Older than WordPress 7.1.4, the current release |
| Needs WordPress | 4.7 or newer |
| Needs PHP | 7.4 or newer |
| First published | October 6, 2014 |
| Support, last two months | 1 of 1 threads resolved (100%) |
Reviews
4.3 / 5 from 24 reviews
| 5 stars | 20 |
|---|---|
| 4 stars | 0 |
| 3 stars | 0 |
| 2 stars | 0 |
| 1 star | 4 |
Downloads, last 30 days
What the author says it does
Gravity Forms Zero Spam stops spam submissions without CAPTCHAs, checkboxes, or puzzles. Install it, switch it on for a form, and it starts working. Nothing changes for the people filling in your forms.
You get four spam checks. One runs out of the box, and three more are there when you need them:
- Invisible token check. On by default. Blocks automated submissions using a signed, time-limited token.
- Email rejection rules. Reject submissions by email address, domain, wildcard, or regular expression.
- AI spam review. Optional. Catches spam the token check missed, and rescues good submissions it blocked by mistake.
- Shield silentCAPTCHA. Optional. Uses Shield Security’s bot detection as an extra signal.
Run one, or run all four. Every check happens on your own server, and optional summary emails keep you posted on what was caught.
Spam blocking your visitors never see 🕵️
The plugin adds a signed, time-limited token to your form and checks it on submission. Most spam bots post directly to your site without loading the page or running its JavaScript, so they never pick up a token and their submissions are marked as spam.
No CAPTCHAs, no puzzles, no extra fields, no cookies, and nothing to configure to get started.
Reject unwanted emails by address, domain, or pattern ✉️
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Questions the author answers
Is the plugin free?
Yes, and every feature described above is included. You need a Gravity Forms license for Gravity Forms itself.
Does AI spam review send my form data to an AI service?
Only if you turn it on. Both AI tools are off by default and nothing leaves your site until you enable them.
When you do, the plugin sends the form title, the page path, and the field labels, types, and submitted values, along with your instructions. Email addresses are masked so only the domain remains, fields you list under “Skip these fields” are removed, and the content is length-capped.
Does this plugin stop email notifications when a submission is marked as spam?
Yes. Marking an entry as spam prevents processing of any configured notifications and add-on feeds.
Note: a spam entry also skips your configured confirmation. The person submitting sees the default Gravity Forms “Thanks for contacting us! We will get in touch with you shortly.” confirmation instead.
Does this work alongside other CAPTCHAs, honeypot fields, or spam blockers?
Yes. Run it next to Gravity Forms’ reCAPTCHA feature or honeypot field, Akismet, CleanTalk, WPBruiser, GravityCaptcha, WP Armor, or fail2ban without conflict.
What version of Gravity Forms do I need?
Gravity Forms 2.3 and newer. Two features need more recent versions: per-form control requires 2.5 or newer, and blocking a submission with an email rejection rule requires 2.9.15 or newer.
How do I control which forms are protected?
Open the form, click Settings, and toggle “Prevent spam using Gravity Forms Zero Spam” under Form Options. To protect most forms, leave the global “Enable Zero Spam by Default” setting Enabled and switch off the individual forms you want excluded.
Latest changelog entry
- Improved: Custom rejection messages now have HTML safely removed before being shown to visitors
- Fixed: Email rejection rules added to a specific field quietly did nothing when the feature was turned off in the plugin settings — the form editor now lets you know and links to the setting
- Fixed: Regular expression rejection rules not working as intended:
- Rules could change when saved (a starting or ending period was removed, and anything after a < was cut off), so they never matched
Tagged
Plugins that share its tags
#990 by installs
Spam Protection | Maspik
Blocks spam the moment you activate it. No CAPTCHA, no setup, no API key. Multi-Layer. Just install and forget.
- Installs
- 30,000+
- Rating
- 4.7 (87)
- Updated
- 3 days ago
#8 by installs
Akismet Anti-spam: Spam Protection
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.
- Installs
- 5+ million
- Rating
- 4.7 (1.2K)
- Updated
- 2 months ago
#237 by installs
Simple CAPTCHA with Cloudflare Turnstile
Add Cloudflare Turnstile to WordPress, WooCommerce, Contact Forms & more. The user-friendly, privacy-preserving reCAPTCHA alternative. 100% free!
- Installs
- 200,000+
- Rating
- 4.7 (262)
- Updated
- 1 day ago
#239 by installs
Anti-Spam, Spam FireWall by CleanTalk
Advanced antispam for comments, registrations & contact forms. No CAPTCHA, plus email validation and honeypot. We catch spam others miss!
- Installs
- 200,000+
- Rating
- 4.8 (3.2K)
- Updated
- 2 days ago
#556 by installs
hCaptcha for WP
The strongest CAPTCHA. Switch from reCAPTCHA and Turnstile for free. Works with 60+ integrations: Contact Form 7, Elementor, WooCommerce, Divi, etc.
- Installs
- 70,000+
- Rating
- 4.6 (88)
- Updated
- 1 day ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin. The author takes donations at their donate page.