Rate-limit your contact form to stop abuse
Prevent bots and abusers from flooding your form endpoint.
- 1
Enable FormLoom's built-in rate limiting
FormLoom applies per-IP and per-key rate limits by default — no config needed.
- 2
Review the spam view
Check the dashboard's spam view; rate-limited attempts are logged.
- 3
Add Turnstile for extra friction (optional)
Enable Cloudflare Turnstile per form for an extra layer against scripted attacks.
FAQ
Per-IP and per-access-key sliding-window limits. The free tier hard-caps at 250 submissions/month with a warning at 90%.