No bot protection on public forms

Why it matters

Bots can create accounts or submit forms in bulk.

How to fix it

Add Cloudflare Turnstile (free) or hCaptcha to signup and contact forms.

How we test it

Passive — runs in the free check, looks only at what a browser can see.