Fieldpost

Fieldpost is a form backend service that processes web form submissions through an API endpoint without requiring backend code from the user. It includes built-in email validation, bot detection, rate limiting, and spam filtering to protect against injection-based attacks. The platform supports integration with frameworks like Next.js, React, Vue, and static site builders like Webflow and Framer.

The service offers a free plan with 250 submissions per month and one form, while the Pro plan costs $9 per month for 5,000 submissions and unlimited forms. The Scale plan is $49 per month and includes 50,000 submissions, HubSpot integration, and priority support with an SLA. All plans include honeypot and rate limiting, with CAPTCHA verification available on the free tier.

Users can get started by reading the documentation and obtaining an access key to point their form's action at the endpoint. The integration requires a 1KB embed script and zero lines of backend code to work with plain HTML or frameworks. Submissions are stored in a Postgres database that the user owns, with optional Supabase compatibility for data management.

The security suite operates on six rules with three modes: block, flag, or off, allowing users to tune protection per form. Features include email validation checking syntax and MX records, bot detection using honeypots and header fingerprinting, and shield filtering for SQL injection and XSS. CAPTCHA options like Turnstile and reCAPTCHA are verified server-side and free on every plan.

Some reviewers praise the ability to handle form security and backend code requirements simultaneously without needing to write custom backend logic. Users appreciate the comprehensive protection suite that runs on every submission, including rate limiting and spam filtering. The platform is noted for its flexibility in integrating with various static site builders and frameworks.

The Pro plan includes autoresponders with custom subjects and trusted domains, while the Scale plan adds sensitive-data redaction for emails, phones, cards, and IPs. HubSpot integration is exclusive to the Scale tier, along with custom email domains and priority support with an SLA. Zapier, Make, and n8n are accessible via webhooks on lower tiers.

Fieldpost is designed for developers and businesses using static site builders or modern frameworks who need a secure form backend without writing custom code. It suits those who want to integrate quickly with tools like Slack, Discord, or Resend notifications. The service is ideal for anyone needing to protect forms from injection attacks and spam.

The platform allows per-form configuration where each rule can be set to block, flag, or off independently. Users can adjust email validation settings to check disposable domains or role addresses. Rate limiting windows can be set to 60 seconds with a maximum of 5 requests per window for specific forms.

The service supports HMAC-signed webhooks for secure integrations and offers redaction of credit cards and other sensitive data. Users can configure the shield to flag SQL injection and template injection payloads at the field level. The embed script is optional and gzipped to 959 bytes to minimize Lighthouse impact.

The service offers a free tier with no credit card required to start building. Users can upgrade to Pro or Scale plans as their needs grow, with the ability to cancel at any time. The free plan includes 250 protected submissions a month forever, ensuring long-term access to basic features.

The official website of Fieldpost is fieldpost.dev.

On Trustburn, Fieldpost has a rating of 3.8 out of 5 based on 5 reviews.