Agent002Forms
Log in

Features

Agent002 Silent Check

Spam protection without a CAPTCHA.

Every Agent002 form is protected by Silent Check, on every plan. People never see it: no traffic lights to click, no “I’m not a robot” box, and nothing loaded from Google or Cloudflare.

Bots meet six checks instead, and the ones they trip don’t tell them so.

Six checks, none of them for people

From the moment a form opens to the moment it’s sent.

A puzzle the browser solves

As soon as a form opens, the browser starts on a small puzzle: finding the one number, among up to 100,000, that gives a known SHA-256 fingerprint. A phone solves it in well under a second, usually before anyone has typed their name. For a bot sending thousands of answers, every single one costs real computing.

Puzzles that work once

Each puzzle is signed by our server, belongs to one form, expires after 20 minutes and is accepted only once. A bot can’t solve one and reuse it, or bring one over from another form.

A clock bots can’t rush

The page notes, with a signature, when it was opened. Anything sent sooner than a person could fill anything in is turned away. Our own form waits out those few seconds, so people never notice.

A field only bots see

Every form has a hidden field that people never see and screen readers skip. Simple bots fill in every box they find, and give themselves away.

Harder under attack

When a form suddenly gets a flood of answers, its puzzles get 4 to 10 times harder for a while. People still don’t notice; a bot farm slows to a crawl.

A limit for each connection

No connection can send more than 20 answers a minute. The address used to count is kept in memory only, never stored.

What a caught bot sees

Why not a CAPTCHA?

No tracking

Services like Google reCAPTCHA watch visitors to decide whether they’re human, and send what they see to another company. Silent Check needs nothing about the person, so forms stay free of cookies and need no banner.

Nobody is locked out

Picture puzzles are hard for people who are blind, have low vision or dyslexia, and a nuisance for everyone else. Silent Check asks nothing of people, so nobody can fail it.

Fast on any phone

The puzzle is solved in the background with the browser’s own cryptography, while people fill in the form.

Nothing leaves our servers

No outside script and no outside check: the puzzle comes from our servers in Germany and goes back to them.

It guards your replies too

When replies are on, the private conversation pages are protected the same way. Leaving an email for notifications, setting a password and asking for a new link all need a solved puzzle, and after 5 wrong passwords a reference waits 15 minutes. About replies

Questions

Do I need to turn Silent Check on?

No. It’s on for every form, on every plan, including embedded forms, and there’s nothing to set up.

Will it stop every spam message?

No tool can: a person paid to fill in forms by hand looks like anyone else. Silent Check makes automated spam slow and expensive, and that’s where nearly all form spam comes from. If something does get through, delete it in Responses.

Does it slow down my form?

No. The puzzle is solved while people fill in the form, so it’s usually done before they press Send.

Does it work when the form is embedded on my site?

Yes. An embedded form is the same form, with the same checks, and it still sets no cookies on your site.

Make your first form in five minutes

Free for personal use. Businesses get 14 days of Starter, no card needed.

Start free