Managed + invisible modes
Pick the mode that matches your form’s risk profile.
Spam protection
Modern, invisible-first CAPTCHA from Cloudflare — no tracking, no puzzles.
Cloudflare Turnstile replaces the “I’m not a robot” checkbox with a passive challenge that runs in the background. Core Forms supports Turnstile natively — both managed and invisible modes — for sites that already use Cloudflare or want a privacy-first alternative.
Pick the mode that matches your form’s risk profile.
Turnstile doesn’t profile users like reCAPTCHA does.
Cloudflare provides Turnstile free of charge for any traffic level.
Cloudflare dashboard → Turnstile → Add site.
Settings → Turnstile, paste site key and secret.
Managed (visible badge) or Invisible (silent).
Cloudflare Turnstile — and every other integration on this site — is included with your
license. Use code CFLAUNCH for 20% off either plan.