Blog
Notes, background and the occasional opinion.
How agencies keep dozens of client forms working
For many clients the contact form is the page that brings in money – yet after launch nobody owns it. A routine, contract points and reporti…
Read articleHow a formexposed check works: passive, transparent, respectful
What happens between entering a domain and reading the report – what the scanner loads, what it checks, what it never does, and what changes…
Read articleWordPress contact forms: a security checklist
Contact Form 7, WPForms, Gravity Forms, Ninja Forms or Fluent Forms – the plugin matters less than how it is set up and maintained. Here is …
Read articleWho else reads along? Third-party scripts on form pages
A contact form page often loads code from half a dozen other companies. Some of it can see what visitors type – and most of it nobody on you…
Read articleWhen the contact form says “Thank you” but no mail arrives
A contact form can break without anyone seeing an error: the visitor gets a friendly confirmation, you get nothing. Why it happens, and how …
Read articleAccessible contact forms and the European Accessibility Act
Since 28 June 2025, the European Accessibility Act sets rules for many consumer-facing digital services. What that means for your contact fo…
Read articleGDPR at the contact form: the points that matter in practice
A contact form looks harmless, but it collects personal data the moment someone clicks Send. Here is what GDPR expects from it – and where t…
Read articleThe CAPTCHA is there – but protects nothing
A visible reCAPTCHA, hCaptcha or Turnstile widget says little about whether a form is protected. Here are the typical misconfigurations and …
Read articleWhat actually protects a form: CAPTCHA, honeypot, time trap, CSRF
Most contact forms rely on a single trick against spam, and many of those tricks only stop the simplest bots. What each protection layer sto…
Read articleWhy contact forms get spammed – and why it's more than an annoyance
Form spam looks like a nuisance you simply delete. In fact it can turn your form into a mail relay, hurt your domain's reputation and bury t…
Read article