The Security modal opens with 3 tabs: Submissions, Spam Protection, and Location
Submissions Tab
Control how many times each person can submit your form. This is enforced server-side and cannot be bypassed.
Submission Options
One submission per person – Each person can only submit the form once. Duplicate submissions are blocked.
Allow multiple submissions – People can submit the form multiple times, up to a limit you set.
Maximum Submissions
When allowing multiple submissions, you can set the maximum number of times each person can submit. Set to 0 for unlimited submissions.
Spam Protection Tab
Block suspicious traffic and protect against fraudulent submissions.
Protection Levels
Off – No spam protection. Accept all submissions.
On (Recommended) – Blocks Tor users and known abusers. Balanced protection that works for most forms.
Strict – Maximum protection. Blocks VPNs, proxies, Tor, and data center traffic.
What Each Level Blocks
On (Recommended):
Tor users – Anonymous network often used for spam
Known abusers – IPs flagged for malicious activity
Strict:
Everything from “On” level
VPN users – Virtual private networks
Proxy servers – Traffic routing services
Data centers – Non-residential IP addresses
Warning: Strict mode may block legitimate users on corporate networks or using privacy tools.
Allow VPN Connections
When using “Off” or “On” protection levels, you can toggle whether to allow VPN connections. This option is not available in Strict mode (VPNs are always blocked).
Location Tab
Control which countries and U.S. states can access your form. Requires Ultimate plan.
Country Restrictions
Allow all countries – No geographic restrictions
Only allow specific countries – Form only accessible from selected countries
Block specific countries – Form accessible everywhere except selected countries
U.S. State Restrictions
When the United States is included in your allowed countries, you can further restrict by state:
Allow all states – No state-level restrictions
Allow some states – Only selected U.S. states can access
Exclude some states – All states except selected ones can access
