Form Security
CAPTCHA Presence on Public Forms Check
CAPTCHAs (reCAPTCHA, hCaptcha) are essential to block automated submissions and brute‑force attacks. Check their presence on your public forms and learn how to integrate them.
What this test checks
This test checks whether your public forms (contact, login, registration, password reset) use a CAPTCHA (reCAPTCHA, hCaptcha, Turnstile). The absence of CAPTCHA exposes your site to automated submissions, spam, and brute‑force attacks, which can degrade performance and compromise security.
Our recommendation
Add a CAPTCHA to all public forms on your site. Use modern solutions like reCAPTCHA v3 (invisible) or hCaptcha for a smooth user experience. For Laravel, packages like 'laravel-recaptcha' simplify integration. Don't forget to configure API keys and test CAPTCHA functionality in production.
Security tests
Read more
Header Security