One managed CAPTCHA layer for your Odoo login, signup, password reset and website forms, with a choice of Cloudflare Turnstile, Google reCAPTCHA v3 or hCaptcha. Every visitor is verified server-side, every blocked attempt is logged on a live dashboard with the IP, provider, form and reason, and you stay in control with an IP allow and deny list, a honeypot fallback and a fail-open or fail-closed switch for provider outages.
Bot Defense puts a managed, monitored CAPTCHA wall in front of every public form in Odoo. Instead of a bare widget you can never see the results of, you pick one provider, drop in your keys, choose which forms to protect, and then watch a live dashboard tell you exactly which bots you blocked and why.
What it does
You choose one CAPTCHA provider in Settings, Cloudflare Turnstile, Google reCAPTCHA v3 or hCaptcha, and paste its site and secret keys. The suite renders the widget and verifies every visitor server-side on your login, signup, password-reset and website form-builder forms, and each form has its own on and off switch, so you protect exactly what you want. Every blocked attempt is recorded: a Blocked Attempts dashboard shows the IP address, provider, form and reason for each block, plus a chart of bot pressure over time split by provider, so you can finally prove the spam you stopped. A built-in honeypot catches simple bots with no external call, an IP allow list lets trusted addresses skip the challenge, and an IP deny list blocks known offenders outright. When a provider has an outage you stay in control, with a fail-open or fail-closed switch that decides whether visitors are let through or blocked, and a Test Keys button validates your keys before you go live.
Key features
- Three CAPTCHA providers, Cloudflare Turnstile, Google reCAPTCHA v3 and hCaptcha, from one dropdown
- Protect login, signup, password reset and website forms, each with its own on and off switch
- Blocked Attempts dashboard with a log and chart of every block by IP, provider, form and reason
- Server-side verification, so a bot cannot skip the check by faking the page
- Fail-open or fail-closed control for provider outages, plus a JS-free honeypot fallback
- IP allow list to skip trusted addresses and an IP deny list to block bad ones outright
- Test Keys button, an adjustable reCAPTCHA v3 score threshold and automatic log cleanup
- Runs on Odoo Community and Enterprise, depends only on base, web and website
Who it's for
Any Odoo site whose public forms are exposed to the internet: businesses fighting credential stuffing on their login and signup pages, marketing teams tired of bot spam drowning their Contact Us leads, and administrators who want proof of what their CAPTCHA is blocking and full control over how it behaves when a provider goes down. If you run Odoo Community and cannot see or manage the built-in CAPTCHA the way you want, this gives you the provider choice, the dashboard and the safety controls to run bot defense properly.
Frequently asked questions
Which CAPTCHA providers does it support in Odoo?
Cloudflare Turnstile, Google reCAPTCHA v3 and hCaptcha. You pick one active provider in Settings and paste its site and secret keys, and you can switch providers at any time without reinstalling.
Which Odoo forms can it protect?
The login form, the signup form, the password-reset form and website form-builder forms such as Contact Us. Each one has its own on and off switch, so you protect exactly the forms you want.
How is this different from a plain Odoo CAPTCHA?
It adds a management and visibility layer a bare CAPTCHA does not have: a live dashboard of every blocked attempt, a choice of three providers from one place, an IP allow and deny list, a honeypot fallback, a fail-open or fail-closed switch for outages and a Test Keys button.
What happens if the CAPTCHA provider has an outage?
You decide. A fail-open or fail-closed setting controls whether visitors are allowed through or blocked when the provider cannot be reached, so a provider outage never locks out your users or your admins by surprise.
Does it need Odoo Enterprise or any paid service?
No. It runs on Odoo Community and Enterprise and depends only on base modules. The CAPTCHA providers themselves offer free tiers, so you only need a free account and keys from Cloudflare, Google or hCaptcha.
Which Odoo versions does Bot Defense support?
Use the version selector on the Odoo Apps Store listing to pick your Odoo release. The module is maintained on Odoo 17, 18 and 19, on both Community and Enterprise.
Want this in your Odoo?
See the full feature list and screenshots, or talk to our certified Odoo team about setup and customization.
