Stop bots.
No CAPTCHAs. No Keys.
No Cost.

<script src="https://cdn.jsdelivr.net/npm/silentshield@latest/dist/silentshield.min.js"></script>

<form data-silentshield action="/submit" method="POST">
  <input type="text" name="name" />
  <input type="email" name="email" />
  <button type="submit">Submit</button>
</form>

<!-- SilentShield auto-inits all [data-silentshield] forms -->

const r = await fetch('https://sh.krl.kr/api/verify', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ token: req.body._ss_token })
});
const { valid, score, verdict } = await r.json();
if (!valid) return res.status(403).send('Bot');

const shield = new SilentShield({
  apiUrl: 'https://sh.krl.kr',
  threshold: 45,
  fakeSuccess: true,
  onBot: (r) => console.log('Blocked bot, score:', r.score)
});
shield.protect('#contact-form');

// Or use the static auto-init (protects all [data-silentshield] forms):
SilentShield.init({ apiUrl: 'https://sh.krl.kr' });

$data = json_decode(file_get_contents('https://sh.krl.kr/api/verify', false,
  stream_context_create(['http' => [
    'method'  => 'POST',
    'header'  => 'Content-Type: application/json',
    'content' => json_encode(['token' => $_POST['_ss_token']])
  ]])
), true);
if (!$data['valid']) { http_response_code(403); exit; }

curl -fsSL \
  https://raw.githubusercontent.com/3289david/silentshield/main/deploy.sh \
  | bash

apt install nginx certbot python3-certbot-nginx
certbot --nginx -d your-domain.com
cp nginx.conf /etc/nginx/sites-available/silentshield
ln -s /etc/nginx/sites-available/silentshield /etc/nginx/sites-enabled/
nginx -t && systemctl reload nginx

new SilentShield({
  apiUrl: 'https://your-domain.com'
}).protect('#my-form');

import { useEffect, useRef } from 'react';
import SilentShield from 'silentshield';

export function ContactForm() {
  const formRef = useRef();

  useEffect(() => {
    const shield = new SilentShield({
      apiUrl: 'https://sh.krl.kr'
    });
    shield.protect(formRef.current);
  }, []);

  return <form ref={formRef} onSubmit={handleSubmit}>...</form>;
}

export async function POST(req) {
  const { token, ...formData } = await req.json();
  const r = await fetch('https://sh.krl.kr/api/verify', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ token })
  });
  const { valid } = await r.json();
  if (!valid) return Response.json({ error: 'Bot' }, { status: 403 });
  // process form...
}

// In functions.php or plugin:
function ss_verify($token) {
  $r = wp_remote_post('https://sh.krl.kr/api/verify', [
    'body' => json_encode(['token' => $token]),
    'headers' => ['Content-Type' => 'application/json']
  ]);
  $data = json_decode(wp_remote_retrieve_body($r), true);
  return !empty($data['valid']);
}