TrafficValidator – Lead Scoring & Bot Detection

TrafficValidator scores every form submission on your site in real time using 30+ detection signals. Bots, spam, disposable emails, and fake leads are identified before they reach your CRM or inbox.

Works with every form plugin:

• Contact Form 7
• Gravity Forms
• WPForms
• Elementor Forms
• Ninja Forms
• Formidable Forms
• HubSpot Forms (embedded)
• Any HTML form

Key features:

• One-click install — no code changes needed
• Async script loading — zero impact on PageSpeed
• Optional server-side blocking — tag or reject low-scoring submissions before they reach your inbox (Contact Form 7, WPForms, Gravity Forms)
• Dashboard widget with lead quality stats
• WooCommerce support for checkout and registration forms
• Compatible with all caching plugins
• Fail-open by design — if scoring is ever unavailable, real leads always get through

How it works:

1. Install the plugin and enter your API key
2. The scoring script loads automatically on every page
3. When a visitor submits a form, the lead is scored across 30+ signals
4. Results appear in your TrafficValidator dashboard in real time

External services

This plugin connects to TrafficValidator, a third-party lead scoring and bot detection service, to score form submissions on your site. The plugin will not function without it, and it requires a TrafficValidator account and API key.

It relies on these external services:

1. TrafficValidator JavaScript SDK (https://cdn.trafficvalidator.com/leadscore.js)

   • What it is: the client-side script that observes form submissions in the browser.
   • When it loads: on every front-end page where the plugin is enabled.
   • What is sent: your Public API key and the form data a visitor submits (such as email, name, phone, and message), together with technical signals (IP address, user agent, and page/referrer URL).

2. TrafficValidator Scoring API (https://api.trafficvalidator.com)

   • What it is: the API that returns a 0-100 quality score and verdict for each submission.
   • When it is called: client-side on form submission, and (only if you enable server-side protection with a Secret key) server-side from your site when a Contact Form 7, WPForms, or Gravity Forms entry is submitted — either to look up the score the browser script already calculated for that submission, or, if none is available, to score it.
   • What is sent: when looking up an existing score, the id of that scored lead; when scoring, the submitted form fields plus the visitor's IP address and user agent.

Data is sent only when a form is submitted (or, for the dashboard widget, when an administrator views the WordPress dashboard). No data is sent for ordinary page views beyond loading the script.

By using this plugin you agree to TrafficValidator's Terms of Service and Privacy Policy: – Terms of Service: https://trafficvalidator.com/terms – Privacy Policy: https://trafficvalidator.com/privacy