Invisible traps
A hidden field and a timing check that only scripts trip. Real visitors never see them. Submissions that skip your page's JavaScript entirely are recorded as a signal.
WordPress · Elementor Pro forms
Form spam filter that keeps every real inquiry.
TW Form Guard checks each Elementor Pro form submission in three layers: invisible traps, rules learned from 29,361 real submissions, and an optional AI judge. If anything on our side is down, your forms keep working.
September 2026 benchmark, 88 real submissions: 63 of 69 spam caught, 19 of 19 genuine inquiries kept. Read the methodology
Free needs no account and sends nothing off your site. Premium adds the AI judge at $79 per site per year, or $9 per site per month.
Benchmark · 88 production submissionsSept 2026
Spam caught
63of 69 spam submissions
Genuine kept
19of 19 real inquiries (0 false positives)
AI judge latency
1.35 smedian, 1.76 s at p95
When the relay is down
Submissionpasses
Log entryai_unavailable
Your formunchanged
Sample: 69 spam and 19 genuine inquiries taken verbatim from live exporter sites. Rules and AI judge combined.
Freetraps and rules, no account, no data leaves your site
Fail-openoutage or used-up quota means your forms keep working
14-dayrefund on Premium, no questions asked
How it works
Three layers. Nothing for a human to solve.
No CAPTCHA, no puzzles, no delay for the buyer. Each submission is scored in order, and the first layer with a clear answer decides.
Rules, in plain PHP
Fifteen rules distilled from replaying 29,361 submissions across our own exporter sites: invalid emails, throwaway domains, template spam in 28 languages, link drops, scam phrases, repeat offenders. Runs locally in under a millisecond.
AI judge
What the rules cannot decide goes to our relay, which asks the model one question: SPAM or HAM. The answer is one word. The message is held in memory only and never stored.
Fail-open by design. If the relay is unreachable, your monthly quota is used up, or the model returns anything but a clear answer, the submission passes and is logged as ai_unavailable. TW Form Guard never blocks a form because of a problem on our side.
Start in Dry-run. Nothing is blocked; everything is logged with its reason. Switch to Block once the log shows no false positives. Blocked submissions are quarantined, and any of them can be released with one click.
Pricing
Free does the job. Premium adds the judge.
Each Premium license covers one site. Stripe hosts checkout and billing. Free keeps working if a subscription ends or the license service is unavailable.
Free
TW Form Guard
$0 forever
- Layer 0 traps and all Layer 1 rules
- Dry-run and Block modes with a reason log
- Quarantine and one-click release
- Custom block keywords and trusted domains
- WordPress privacy export and erase support
- No account, no license, nothing sent to us
GPL. Requires WordPress 6.0+, PHP 7.4+, Elementor Pro.
Premium
TW Form Guard + AI judge
$79 per site per year
or $9 per site per month
- Everything in Free
- AI judge for submissions the rules cannot decide
- Includes 10,000 AI judgments per month, then falls back to rules — never blocks your forms
- License bound to one site; move it any time
- Email support and plugin updates
- 14-day refund
- Card Visa · Mastercard · Amex
- Alipay yearly plan
- WeChat Pay yearly plan
- Billed by Stripe
What counts as an AI judgment: one submission that the traps and rules could not decide and that the relay accepted for an answer. Rule-blocked and trusted-domain submissions never reach the relay and never count; requests the relay refuses (quota reached, rate limit) do not count either. Past 10,000 in a calendar month (UTC) the plugin simply runs rules only until the month resets.
FAQ
Before you install
Which forms does it protect?
Version 2.0 protects Elementor Pro forms, including popup forms. Contact Form 7, WPForms and Gravity Forms adapters are planned but not shipped; do not buy Premium for those yet.
Will it block real customers?
In the September 2026 benchmark of 88 real submissions, all 19 genuine inquiries passed and 63 of 69 spam submissions were caught. That is a measurement, not a guarantee: start in Dry-run, read the log for a week, and only then switch to Block. Anything blocked stays in quarantine and can be released.
What is sent to the AI, and where?
Only Premium sites with the AI judge switched on (it is off by default) send anything. The plugin sends the sender name, email address and message text (up to 1,500 characters) to our relay in the United States, which passes them to the model provider, DeepSeek in China, and returns one word. The visitor's IP address and your other form fields are not sent. The relay keeps no copy of the content. Details, including sub-processors, in the privacy policy.
What happens after 10,000 judgments in a month?
The AI layer pauses and the plugin runs traps and rules only until the first day of the next month. Your forms keep accepting submissions. Nothing is charged extra.
Can I move a license to another site?
Yes. Deactivate it on the old site (or from the settings page) and activate on the new one. One license is active on one production site at a time; staging copies do not count while they are not activated.
What if I cancel or stop paying?
Premium features stop at the end of the paid period and the plugin drops back to Free automatically. Your log, settings and quarantine stay in your database.
Do I still need a CAPTCHA?
No. TW Form Guard adds nothing visible to the form and does not slow the buyer down. You can keep an existing CAPTCHA if you want; the plugin runs after Elementor's own validation.
Refunds?
14 days from purchase, no questions asked. Email support@storefixkit.com with the checkout email.
Questions before you install? One address for setup, bugs and billing.
WordPress · Elementor Pro 表单
过滤表单垃圾，一条真询盘都不丢。
TW Form Guard 对每条 Elementor Pro 表单提交做三层判断：隐形陷阱、从 29,361 条真实提交中提炼的规则、可选的 AI 判定。我们这边任何环节出问题，你的表单照常收询盘。
2026 年 9 月 88 条真实询盘基准：垃圾捕获 63/69，真询盘 19/19 保住。查看测试方法
免费版不用注册账号，也不向我们发送任何数据。付费版增加 AI 判定，每站每年 $79，或每站每月 $9。
基准 · 88 条生产环境真实提交2026 年 9 月
垃圾捕获
63共 69 条垃圾提交
真询盘保住
19共 19 条真询盘（0 误伤）
AI 判定耗时
1.35 秒中位数，p95 为 1.76 秒
中转服务不可用时
该条提交放行
日志记录ai_unavailable
你的表单不受影响
样本：69 条垃圾 + 19 条真询盘，全部取自外贸站的原始提交。规则层与 AI 层合并统计。
免费陷阱 + 规则，不注册、不外发任何数据
不断服服务故障或额度用完，表单照常工作
14 天付费版无理由退款
工作原理
三层判断，买家什么都不用做。
没有验证码、没有拼图、不让买家多等一秒。每条提交按顺序过三层，哪一层先给出明确结论就以哪一层为准。
隐形陷阱
一个隐藏字段和一个提交时间检查，只有脚本才会触发，真人访客根本看不到。完全绕过页面 JavaScript 的提交会被记录为信号。
规则，纯 PHP
回放我们自己外贸站的 29,361 条提交后提炼出 15 条规则：无效邮箱、一次性域名、28 种语言的模板垃圾、链接堆砌、诈骗话术、重复来源。在你的服务器本地运行，耗时不到 1 毫秒。
AI 判定
规则拿不准的提交发到我们的中转服务，只问模型一个问题：SPAM 还是 HAM。回答只有一个词。消息只在内存中处理，不落盘。
设计上就不断服。中转服务连不上、当月额度用完、或模型没给出明确回答，这条提交一律放行，日志记为 ai_unavailable。TW Form Guard 绝不会因为我们这边的问题拦住你的表单。
先用 Dry-run（只记录）模式。什么都不拦，每条都记下原因。看一周日志确认没有误伤，再切换到 Block（拦截）。被拦的提交进隔离区，随时一键放行。
价格
免费版能干活，付费版多一个 AI 判定。
每个付费 license 绑定一个站点。结账和账单由 Stripe 托管。订阅到期或 license 服务不可用时，免费版功能照常。
免费版
TW Form Guard
$0 永久
- 第 0 层陷阱 + 第 1 层全部规则
- Dry-run / Block 两种模式，日志带原因
- 隔离区 + 一键放行
- 自定义拦截关键词和信任域名
- 支持 WordPress 隐私导出与擦除
- 不注册、无 license、不向我们发送任何数据
GPL 协议。需要 WordPress 6.0+、PHP 7.4+、Elementor Pro。
付费版
TW Form Guard + AI 判定
$79 每站 / 年
或每站每月 $9
- 免费版全部功能
- 规则拿不准的提交交给 AI 判定
- 每月含 10,000 次 AI 判定，超出后自动回退到规则层——绝不拦你的表单
- license 绑定一个站点，随时可迁移
- 邮件支持 + 插件更新
- 14 天退款
- 支付宝 年付
- 微信支付 年付
- 银行卡 Visa · Mastercard · Amex
- Stripe 收款
什么算一次 AI 判定：陷阱和规则都拿不准、并且被中转服务受理的一条提交。被规则拦下的和信任域名的提交根本不会发到中转，不计数；被中转拒绝的请求（额度已满、触发限速）也不计数。一个自然月（UTC）超过 10,000 次后，插件只跑规则，到下月自动恢复。
常见问题
安装前先看这里
支持哪些表单？
2.0 版只支持 Elementor Pro 表单（含弹窗表单）。Contact Form 7、WPForms、Gravity Forms 的适配在计划中但还没发布，用这些表单的站先别买付费版。
会不会误拦真客户？
2026 年 9 月 88 条真实提交的基准里，19 条真询盘全部放行，69 条垃圾拦下 63 条。这是实测数据，不是保证：先用 Dry-run 看一周日志，确认没误伤再切 Block。拦下的提交都在隔离区，随时可放行。
发给 AI 的是什么数据，发到哪里？
只有开了 AI 判定的付费站点才会外发（默认关闭）。插件把发件人姓名、邮箱和留言正文（最多 1,500 字符）发到我们在美国的中转服务，中转再交给模型供应商 DeepSeek（中国），拿回一个词。访客 IP 和表单其他字段不发。中转服务不保存任何内容。子处理者等细节见隐私政策。
当月 10,000 次用完了怎么办？
AI 层暂停，插件只跑陷阱和规则，到下月 1 号自动恢复。表单照常收询盘，不额外收费。
license 能换站吗？
能。在旧站停用（或在设置页解绑），到新站激活即可。一个 license 同一时间只能在一个生产站激活，没激活的测试站不占名额。
取消订阅或不续费会怎样？
付费功能到当期结束停止，插件自动回到免费版。日志、设置、隔离区都还在你的数据库里。
还需要验证码吗？
不需要。TW Form Guard 不在表单上加任何可见元素，也不拖慢买家。已有的验证码可以保留，插件在 Elementor 自己的校验之后运行。
退款怎么办？
购买后 14 天内无理由退款。用下单邮箱发信到 support@storefixkit.com 即可。