Security

A monitoring tool runs on someone else's site. That's a responsibility.

Formitor's spoke plugin lives on your clients' WordPress installs, which means its security posture is part of theirs. Here is exactly how it behaves, without marketing gloss.

Design principles

Least privilege, synthetic data, evidence over trust.

  • HMAC-authenticated spoke. The plugin only acts on requests cryptographically signed by Formitor. An attacker who finds the endpoint cannot trigger submissions, read data, or change settings without the site's key.
  • Synthetic data only. Formitor generates its own tagged test leads and test orders. It does not read, store, or transmit your clients' real form submissions or customer data.
  • Scoped CAPTCHA bypass. Testing through Turnstile, reCAPTCHA, hCaptcha and CleanTalk uses a signed, single-purpose test token. Real visitors and bots see the CAPTCHA unchanged; the bypass cannot be replayed by anyone without Formitor's signature.
  • Read-only seed mailboxes. Delivery is verified against inboxes Formitor owns. The system looks for its own tagged message and deletes it. It has no access to anyone's real mailbox.
  • Cleanup after every check. Test entries, test orders, and test emails are removed once the check completes. Client CRMs, order lists and inboxes stay clean.
  • $0 checkout tests. WooCommerce tests are synthetic draft orders; SureCart tests run in test mode. No real payment is ever charged and no inventory is touched.
Data handling

What Formitor stores, and what it never sees.

The dashboard stores what monitoring needs and nothing else: site URLs, form identifiers, check results, timestamps, and the alert routes you configure. Failure screenshots capture what a visitor saw on a broken submission, using Formitor's own test data.

data inventory
Site URLs & form IDsstored
Check results & historystored
Failure screenshots (test data)stored
Real visitor submissionsnever seen
Real customer / order datanever seen
Client mailbox contentsnever seen

Found something? Report security issues to support@formitor.com and we'll respond as a priority. We don't display compliance badges we haven't earned; when certifications land, they'll be listed here with evidence.

Trustworthy on infrastructure you don't own.

That's the design bar for everything the spoke does.

Start monitoring How it works