Block spam submissions with reCAPTCHA v3

You can now enable Google reCAPTCHA v3 on a project to keep bot submissions out of your feedback. It runs invisibly in the background, so there are no puzzles and no extra friction for the people you actually want to hear from.

Every submission gets a risk score. Anything below the threshold you set is rejected before it reaches your dashboard.

Turn it on in your project's security settings. The reCAPTCHA setup guide covers the site and secret keys and how to pick a threshold.

Start with a permissive threshold and tighten it only if spam still gets through. A threshold set too high silently rejects real feedback, and rejected submissions are not something you can go back and read.

The feedback management tool is where the surviving submissions land.