Blog

Notes, background and the occasional opinion.

Product 05.10.2026

How agencies keep dozens of client forms working

For many clients the contact form is the page that brings in money – yet after launch nobody owns it. A routine, contract points and reporti…

Read article
Product 01.10.2026

How a formexposed check works: passive, transparent, respectful

What happens between entering a domain and reading the report – what the scanner loads, what it checks, what it never does, and what changes…

Read article
Basics 28.09.2026

WordPress contact forms: a security checklist

Contact Form 7, WPForms, Gravity Forms, Ninja Forms or Fluent Forms – the plugin matters less than how it is set up and maintained. Here is …

Read article
Engineering 22.09.2026

Who else reads along? Third-party scripts on form pages

A contact form page often loads code from half a dozen other companies. Some of it can see what visitors type – and most of it nobody on you…

Read article
Engineering 16.09.2026

When the contact form says “Thank you” but no mail arrives

A contact form can break without anyone seeing an error: the visitor gets a friendly confirmation, you get nothing. Why it happens, and how …

Read article
Legal 09.09.2026

Accessible contact forms and the European Accessibility Act

Since 28 June 2025, the European Accessibility Act sets rules for many consumer-facing digital services. What that means for your contact fo…

Read article
Legal 03.09.2026

GDPR at the contact form: the points that matter in practice

A contact form looks harmless, but it collects personal data the moment someone clicks Send. Here is what GDPR expects from it – and where t…

Read article
Engineering 27.08.2026

The CAPTCHA is there – but protects nothing

A visible reCAPTCHA, hCaptcha or Turnstile widget says little about whether a form is protected. Here are the typical misconfigurations and …

Read article
Basics 19.08.2026

What actually protects a form: CAPTCHA, honeypot, time trap, CSRF

Most contact forms rely on a single trick against spam, and many of those tricks only stop the simplest bots. What each protection layer sto…

Read article
Basics 11.08.2026

Why contact forms get spammed – and why it's more than an annoyance

Form spam looks like a nuisance you simply delete. In fact it can turn your form into a mail relay, hurt your domain's reputation and bury t…

Read article