Signed browser proof
An expiring, server-verifiable token separates ordinary visitors from blind submission bots.
Version 1.1.1 · Free and open source
RockSolid by Klyrone
Form spam meets its hard stop.
Layered WordPress form protection without CAPTCHAs, visitor tracking, or sending private submissions to another company.
Fluent Forms Contact Form 7 Custom form API
Protection overviewLocal analysis · no cloud dependency
Detection layers6Working together
External requests0Your data stays local
Visitor puzzles0No CAPTCHA friction
Rollout modes2Monitor, then enforce
ALLOW signed_token · normal_velocity
FLAG token_missing · score_35
BLOCK honeypot · duplicate_content
DEFENSE IN DEPTH
No single trick carries the load.
RockSolid combines independent signals into an explainable score, making it harder for bots to bypass protection and easier for you to tune it.
Invisible honeypot
Automated field-fillers reveal themselves without making people solve a challenge.
Behavior timing
Implausibly fast submissions contribute to a combined risk score instead of causing brittle one-rule blocks.
Content intelligence
Link density, configurable phrases, gibberish, and duplicate messages expose common outreach spam.
Velocity controls
Atomic per-IP and per-email counters slow repeated attacks while failing open if storage is unavailable.
Privacy-minimized logs
Review scores and reason codes without duplicating names, emails, messages, or raw IP addresses.
CONTROLLED ROLLOUT
Watch first. Block with confidence.
Every site has different traffic. RockSolid starts in monitor mode so you can inspect real scores before enforcement.
Install the ZIP
In WordPress, open Plugins → Add New → Upload Plugin, then activate RockSolid.
Monitor for 3–7 days
Review privacy-safe scores and reason codes under Settings → RockSolid Anti-Spam.
Enable enforcement
Tune thresholds if needed, switch to Enforce, and keep the independent protection layers active.
BUILT BY KLYRONE
Private by design. Practical by default.
Install the complete local protection layer today. WordPress.org distribution is in preparation.