What stands out is the balance between ease of use and robust security. The ability to point a form at the endpoint and get email validation, bot detection, and rate limiting without writing backend code is a significant advantage. I particularly appreciate that submissions land in a Postgres database that you own, with the option to export via API. The fact that raw IPs are never stored, only salted hashes, adds a layer of privacy that is often overlooked. While the setup is straightforward, having control over the security modes allows for fine-tuning protection without redeploying. It seems like a reliable choice for maintaining form integrity.
Haven't used Fieldpost yet?
Ask Trustburn
What reviewers say about Fieldpost
Customers generally describe Fieldpost as easy to set up and lightweight, praising the inclusion of CAPTCHA on every plan, the small embed script, the no-backend-code approach, and the privacy-friendly use of salted hashes instead of raw IPs, with all five reviews rating it 3 stars or higher.
What is Fieldpost?
Fieldpost is a form backend service that processes web form submissions through an API endpoint without requiring backend code from the user. It includes built-in email validation, bot detection, rate limiting, and spam filtering to protect against injection-based attacks. The platform supports integration with frameworks like Next.js, React, Vue, and static site builders like Webflow and Framer.
What are the pricing tiers and submission limits?
The service offers a free plan with 250 submissions per month and one form, while the Pro plan costs $9 per month for 5,000 submissions and unlimited forms. The Scale plan is $49 per month and includes 50,000 submissions, HubSpot integration, and priority support with an SLA. All plans include honeypot and rate limiting, with CAPTCHA verification available on the free tier.
How do I set up and integrate Fieldpost?
Users can get started by reading the documentation and obtaining an access key to point their form's action at the endpoint. The integration requires a 1KB embed script and zero lines of backend code to work with plain HTML or frameworks. Submissions are stored in a Postgres database that the user owns, with optional Supabase compatibility for data management.
What specific security rules and modes does Fieldpost offer?
The security suite operates on six rules with three modes: block, flag, or off, allowing users to tune protection per form. Features include email validation checking syntax and MX records, bot detection using honeypots and header fingerprinting, and shield filtering for SQL injection and XSS. CAPTCHA options like Turnstile and reCAPTCHA are verified server-side and free on every plan.
What do reviewers praise about Fieldpost?
Some reviewers praise the ability to handle form security and backend code requirements simultaneously without needing to write custom backend logic. Users appreciate the comprehensive protection suite that runs on every submission, including rate limiting and spam filtering. The platform is noted for its flexibility in integrating with various static site builders and frameworks.
What integrations and advanced features are available on higher plans?
The Pro plan includes autoresponders with custom subjects and trusted domains, while the Scale plan adds sensitive-data redaction for emails, phones, cards, and IPs. HubSpot integration is exclusive to the Scale tier, along with custom email domains and priority support with an SLA. Zapier, Make, and n8n are accessible via webhooks on lower tiers.
Who is Fieldpost best suited for?
Fieldpost is designed for developers and businesses using static site builders or modern frameworks who need a secure form backend without writing custom code. It suits those who want to integrate quickly with tools like Slack, Discord, or Resend notifications. The service is ideal for anyone needing to protect forms from injection attacks and spam.
How can users customize security settings per form?
The platform allows per-form configuration where each rule can be set to block, flag, or off independently. Users can adjust email validation settings to check disposable domains or role addresses. Rate limiting windows can be set to 60 seconds with a maximum of 5 requests per window for specific forms.
What advanced configuration options exist for integrations and redaction?
The service supports HMAC-signed webhooks for secure integrations and offers redaction of credit cards and other sensitive data. Users can configure the shield to flag SQL injection and template injection payloads at the field level. The embed script is optional and gzipped to 959 bytes to minimize Lighthouse impact.
What are the terms for starting and upgrading plans?
The service offers a free tier with no credit card required to start building. Users can upgrade to Pro or Scale plans as their needs grow, with the ability to cancel at any time. The free plan includes 250 protected submissions a month forever, ensuring long-term access to basic features.
What is the official website of Fieldpost?
The official website of Fieldpost is fieldpost.dev.
How is Fieldpost rated on Trustburn?
On Trustburn, Fieldpost has a rating of 3.8 out of 5 based on 5 reviews.
Post your question publicly — other visitors, and whoever manages this page, can answer. It will be visible on this page.
Want to hear about this company again? Follow it and we’ll email you when a new review appears.
Based on reviews, listing data and the company's website. Verify anything important with the company directly.
5 Reviews
I am absolutely thrilled with how quickly I got Fieldpost running on my new site. The documentation makes it incredibly clear that I can drop a form into any site in just five minutes, which is exactly what I needed. It is fantastic that email validation, bot detection, and spam filtering run on every submission without requiring any backend code. I love that the security suite offers six rules per form with different modes like block or flag. The fact that I can use plain HTML or frameworks like React and still get robust protection is a game changer for my workflow. Highly recommended.
The integration process is remarkably straightforward, requiring only a single endpoint and an access key. I appreciate that the optional embed script is under one kilobyte, ensuring my Lighthouse scores remain unaffected while still providing essential AJAX capabilities. It truly feels like a lightweight solution that delivers significant value without cluttering the codebase or slowing down the user experience.
From the information available, Fieldpost presents a compelling case for developers looking to secure their forms without managing a backend. The promise of zero backend code and the inclusion of features like rate limiting and shield filtering for SQL injection and XSS are impressive technical achievements. However, one must consider that while the free tier is included, the specifics of the security rules and how they interact with different frameworks like Next.js or Webflow might require some initial experimentation. The documentation suggests that privacy is handled via salted hashes rather than storing raw IPs, which is a positive note. Yet, for a seamless experience, understanding the exact configuration required for each security mode is essential before full deployment.
The range of security options is impressive. It is reassuring that CAPTCHA solutions like Turnstile and reCAPTCHA are included on every plan rather than being paywalled features.
Questions & Answers
No questions yet — be the first to ask.
Sign in to post
Your text is saved — you'll come right back to post.
or with email
Don't have an account? Create one
News & Press
No news yet. This is where the business shares its own updates and press.
Photos
No photos yet. Photos shared by reviewers will show up here.
About Fieldpost
Fieldpost provides a form backend service that processes web form submissions through an API endpoint. The platform includes built-in email validation, bot detection, rate limiting, spam filtering, and protection against injection-based attacks, designed to work without requiring backend code from the user. It supports integration with various frameworks and static site builders, including plain HTML, Next.js, React, Vue, Svelte, Astro, Webflow, and Framer. Submissions are stored in a Postgres database, and the service offers optional CAPTCHA support as well as compatibility with Supabase for data management.
- Website
- fieldpost.dev
- [email protected]
- Categories
- Computer software, Internet, Computer & network security
