Looking for a Cloudflare Turnstile alternative?

oopspam is a Cloudflare Turnstile alternative that blocks spam server-side: no widget, no JavaScript, and no Cloudflare dependency.

Privacy-friendly Accessible Customizable Fast + accurate API Trusted on 3.5 million+ sites

Get Started for Free →

✓ No credit card required ✓ Cancel anytime

Last updated

Tired of Turnstile errors? See the alternative

Errors like 110200, 106010 and "token missing" come from the widget, not from your forms. oopspam has no widget to fail: it filters on the server, so there's nothing to break.

Get started free → Read the Turnstile errors guide →

The Turnstile errors you're seeing

Most WordPress Turnstile problems trace back to the same handful of errors:

  • 110200 (invalid domain / sitekey mismatch): the widget is loaded for a domain or key Cloudflare doesn't recognise.
  • 106010 (invalid or expired token): the challenge token didn't arrive in time or was used twice, often because of caching or a slow theme.
  • Missing token: a form submits without a Turnstile response, so server-side validation fails.

They're all symptoms of the same thing: a widget that has to load, run and hand a token back before a form can be sent. Cache plugins, JavaScript optimisers, cookie banners and slow connections all get in the way.

oopspam removes the widget entirely. Submissions are scored on your server after they arrive, so there's no token, no challenge and no front-end script to fail. We explain the fixes in our guide to common Turnstile errors.

oopspam spam report

oopspam vs Turnstile at a glance

FeatureoopspamTurnstile
What visitors seeNothing. Checks run on your serverUsually nothing; sometimes a one-click widget
CostFree: 40 checks/month. Paid from $23/month for 25,000 checks, unlimited websitesFree, with unlimited challenges (up to 20 widgets, 10 hostnames each). Enterprise via Cloudflare sales
Needs a Cloudflare account✗ Works on any host✓ Sitekey and secret from Cloudflare
Reads the message content✓ Spam words, links, language✗ Checks the visitor, not the message
Block by country or language✓ Not in Turnstile (needs separate Cloudflare rules)
Explains each block✓ Spam score and reasons✗ Pass or fail
Script added to your pagesNoneCloudflare's Turnstile script

Prices checked on 5 October 2026. Sources: oopspam pricing, Cloudflare Turnstile plans.

What People Are Saying

nahnufitness | source

I signed up for a test and joined a paid program right away. All the spam emails getting through Captcha have now stopped. Loved how easy it was to work with Elementor Forms.

adkoen | source

oopspam has turned out great so far. The setup is a quick minute or so per website and you’re good to go. Consider the time you need to setup something like Cloudflare Turnstile or Google captcha, and with these solutions you don’t even have a decent log file.

datacram | source

Tried the trial first, worked successfully, 100% stopped spam. Upgraded to paid plan. Customer support great as well, contacted and received email back within 30 minutes on a weekend!

accessibility icon

No more accessibility issues.
Higher conversion rate.

Make your website accessible for everyone. oopspam works in your backend and never interacts with your visitors. Increase conversion rate and keep your visitors happy.

No Cloudflare account, no lock-in

Turnstile ties your form protection to Cloudflare's network and dashboard. oopspam is independent: one API key, no CDN, no DNS changes. We are GDPR-friendly, keep no logs by default, and ask only for the minimum data needed to score a submission.

shield icon
Spam Score response of oopspam Anti-Spam

Spam score, block by country and languages

oopspam returns a spam score, giving you more control over your spam protection. Set the spam sensitivity level to avoid missed opportunities. You can also block messages by country and language. All this and more without your visitors having to solve or see a puzzle.

Know why it is spam

Just like Turnstile, oopspam automatically blocks spam. oopspam goes a step further by giving you a detailed report explaining why a message was marked as spam. This helps you better understand your spam and how to deal with it.
oopspam Score and Details example response
oopspam WordPress Plugin screenshot

Spam Protection for your WordPress websites

Looking for WordPress integration?

We have your back. Check out our WordPress plugin. Increase the performance of your website by not having to load any script or display any badge on your website.

24/7 customer support

We reply fast. Contact us for any questions or concerns.

headphone

How to switch from Turnstile

On WordPress it takes a few minutes, and you don't need to edit your forms.

  1. Create a free oopspam account and copy your API key from the dashboard. The free plan includes 40 checks a month, with no credit card.
  2. Install the oopspam Anti-Spam plugin from WordPress.org and activate it.
  3. Paste your key into the My API Key field, or follow the Setup Wizard.
  4. Turn on Activate Spam Protection for each form plugin you use. Comments are protected automatically.
  5. Remove the Turnstile widget and its keys from your forms once you're happy with the results. You can run both while you test.

Not on WordPress? Send each submission to the oopspam API (one call per check), or connect your forms through Zapier or Make.

Your search for a Turnstile alternative is over

Turnstile alternative: common questions

Is Cloudflare Turnstile free?

Yes. The free plan includes unlimited challenges, up to 20 widgets and 10 hostnames per widget. Enterprise adds more widgets and hostnames and removes Cloudflare branding, priced through Cloudflare sales (Turnstile plans, checked 5 October 2026).

What does Turnstile error 110200 mean?

It means the domain isn't on the widget's list of allowed hostnames, often after a domain change or on a staging site. Our Turnstile errors guide covers 110200, 106010 and the rest. oopspam has no widget or sitekey, so these errors don't apply.

Does Turnstile check what people write?

No. Turnstile checks whether a visitor looks like a bot; it doesn't read the message. That's why spam written by real people still gets through. oopspam scores the content, email, IP, country and language of each submission.

Do I need a Cloudflare account to use oopspam?

No. oopspam works on any host, with or without Cloudflare.

Does oopspam store my visitors' data?

Not by default. The oopspam API scores each submission without storing it, so there is no data to identify or track your visitors. See our GDPR notice and Data Processing Agreement.

How much does oopspam cost?

You can start with 40 free spam checks a month, no credit card required. Paid plans start at $23/month for 25,000 checks, and every plan covers unlimited websites. See pricing.