Bot Defense & CAPTCHA Manager

Bot Defense puts a managed, monitored CAPTCHA wall in front of every public form in Odoo. Instead of a bare widget you can never see the results of, you pick one provider, drop in your keys, choose which forms to protect, and then watch a live dashboard tell you exactly which bots you blocked and why.

What it does

You choose one CAPTCHA provider in Settings, Cloudflare Turnstile, Google reCAPTCHA v3 or hCaptcha, and paste its site and secret keys. The suite renders the widget and verifies every visitor server-side on your login, signup, password-reset and website form-builder forms, and each form has its own on and off switch, so you protect exactly what you want. Every blocked attempt is recorded: a Blocked Attempts dashboard shows the IP address, provider, form and reason for each block, plus a chart of bot pressure over time split by provider, so you can finally prove the spam you stopped. A built-in honeypot catches simple bots with no external call, an IP allow list lets trusted addresses skip the challenge, and an IP deny list blocks known offenders outright. When a provider has an outage you stay in control, with a fail-open or fail-closed switch that decides whether visitors are let through or blocked, and a Test Keys button validates your keys before you go live.

Who it's for

Any Odoo site whose public forms are exposed to the internet: businesses fighting credential stuffing on their login and signup pages, marketing teams tired of bot spam drowning their Contact Us leads, and administrators who want proof of what their CAPTCHA is blocking and full control over how it behaves when a provider goes down. If you run Odoo Community and cannot see or manage the built-in CAPTCHA the way you want, this gives you the provider choice, the dashboard and the safety controls to run bot defense properly.