Introducing Gravity Forms Spam Hexer
Discover a new spell against spam — ridiculously powerful, sorcerously simple.
One of our biggest problems: ceaseless, unrelenting spam.
We tried CAPTCHAs. Honeypots. Spam filters. Custom rules. Every layer helped, but the spam kept coming. And each new defense came with another subscription, another service, another dashboard.
Eventually, we realized we were solving the same problem over and over again with a growing stack of tools.
So we built our own spell. 🧙♂️
Meet GF Spam Hexer, a free plugin that combines multiple spam-fighting techniques into a single, surprisingly effective defense.
The result?
We’ve been able to cancel our Akismet subscription, deactivate Cloudflare Turnstile, and dramatically reduce spam across both our Gravity Forms and WordPress comments.
Proof of Work: The Chimera Defense
The first layer of protection is proof of work — what we affectionately call the Chimera Defense.
Before a submission can be sent, the visitor’s browser must complete a tiny proof-of-work challenge behind the scenes. Think of it as solving a mathematical riddle to earn the right to submit the form.

This stops most bots dead in their tracks. Since the challenge is completed by the visitor’s browser, spambots that don’t execute JavaScript never get the chance to submit. And for the more sophisticated bots that do, every submission comes with a computational cost—turning spam into an expensive endeavor, all while remaining completely invisible to legitimate visitors.
AI Spam Classification
Some spam still finds a way through traditional defenses. That’s where AI comes in.
When AI Classification is enabled, Spam Hexer gives AI rich context about your site, your form, and your fields. Armed with that information, it can make surprisingly accurate decisions about whether a submission is legitimate or spam.

You choose how Spam Hexer connects to AI.
Use WordPress 7.0+ AI Connectors or OpenRouter, then select from the models available through those providers. There’s no separate Spam Hexer subscription; you can use the AI access you’re already using elsewhere.
Need additional privacy? OpenRouter also provides access to Zero Data Retention models.
Built for Real Sites
Spam Hexer includes a few quality-of-life touches we consider essential:
- Automatically bypass spam checks for logged-in users.
- Protect both Gravity Forms submissions and WordPress comments from a single plugin.
- Track detailed statistics so you can see exactly how much spam is being blocked and why.

Completely Free
Ready to banish spam to the abyss from whence it came?
Spam Hexer is completely free — no subscription required.
Install Spam Hexer from the Spellbook and put the spell to work!