Emerald Red Team

ERT-ABUSE-003

Public form without spam protection

LowCWE-799

Why it matters

Bots will fill this form with spam and can use it to send email on your behalf.

How to fix it

Add Turnstile or a honeypot field and rate-limit submissions.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free