What's new in Formitor.
Every meaningful improvement to the product and the WordPress plugin, newest first.
-
Hijack forms: live-test any form straight to your own inbox
Turn on Hijack forms from the top admin bar (it shows on your front-end pages too), enter one or more email addresses (it defaults to your own), and every form notification you trigger while testing goes to those inboxes instead of the client. Test on Gmail, Outlook, anywhere, without editing each form's recipient. Real visitor submissions are never affected, and the mode turns itself off automatically after the window you pick.
-
Reconnect a site without deleting it
Regenerated a site key or secret? Open a site's Edit panel and choose Update connection keys. The URL and site key are already filled in, so you just paste a fresh secret and reconnect. Your site keeps all of its monitoring history. A successful reconnect also clears the plugin inactive badge right away.
-
Copy your site URL, and your shared secret stays hidden
The Formitor plugin's Tools screen now shows your Website URL with a one-click Copy button, so connecting a site to the hub is copy, copy, copy. Your shared secret is now masked by default with a Show/Hide toggle, so it will not sit in plain sight on your screen or in a screenshot. Copy still grabs the real value.
-
Security & reliability hardening
A deep security pass across the whole platform: stricter database access rules (including uniform MFA enforcement on all account data), hardened server-side request validation on every site-facing check, per-account rate limits on the AI assistant and support tickets, integrity-verified plugin updates (each release is now checksum-verified before installing), and integrity-pinned dashboard scripts. No action needed on your side.
-
Enable deep browser checks on any form — and see the screenshot when it fails
Tier-3 deep check is now available to all Pro subscribers. Enable it per form with the new **🤖 On/Off** toggle in the form row. When active, a real headless browser fills out the form and clicks Submit every week — catching problems that server-side checks can't see, like hidden-required fields that block submission, broken submit buttons, or JavaScript errors that only appear in a real browser. If a deep check fails, click the **✕ deep check failed** badge to open the screenshot taken at the moment it got stuck — so you can see exactly what went wrong.
-
Search all your form test results from one place
The new Mail Log in the dashboard gives you a searchable, cross-site view of every form check result. Filter by site, form, delivery status, or date range — or type any text to search by email address, subject, error message, or source page. Useful for tracking down a specific failed delivery or seeing at a glance what happened across all your sites.
-
Search and filter the mail log in wp-admin
The Mail Log tab in the Formitor plugin now has a full filter bar: search by recipient email, subject, form name, or page URL; narrow to a specific form from a dropdown; and limit results to the last 7 or 30 days. All filters compose together and stay active when you page through results or switch between the All / Sent / Failed / Formitor tests / Real mail tabs.
-
Update the plugin on all your sites from one button
No more updating the Formitor plugin site by site. The new "Update sites" button in the dashboard pushes the latest plugin to every connected site at once and shows you a per-site result. And from this version on, each site keeps its Formitor plugin up to date automatically — when we ship an update, your sites pull it within about a day with nothing for you to do. (A site running a much older plugin needs one final manual update from its own wp-admin to switch this on; after that it's hands-off.)
-
See when a site's Formitor plugin is deactivated
If the Formitor plugin gets deactivated on a site while the site itself is still up, the dashboard now shows a “Plugin inactive” badge on that site — so you know monitoring has stopped there and can reactivate it, instead of it silently going quiet.
-
Paused sites show as “Paused” on shared status pages
If you pause a site or a form, your shared/public status page now shows it as “Paused” (grey) instead of hiding it or showing green — so people viewing the link aren't misled into thinking everything's being checked.
-
A friendlier welcome for invited users
When you accept an invite to Formitor, you now get a short welcome with a one-click option to set a password — and a reminder that you can also sign in with a magic link or with Google.
-
See each form's 7-day test history
Every form now has a History button that opens the last 7 days of synthetic checks — when it passed, the delivery status, how long each check took, and the exact error on any failure. Quick way to see whether a form has been flaky.
-
Pause an individual form, with a timer
Each form now has a Pause control in the dashboard — pause for 1h, 4h, 24h, or until you resume. Paused forms aren't submitted and don't alert, and timed pauses resume themselves automatically.
-
Gravity Forms test emails fully blocked (async notifications)
Gravity Forms sends its notifications through a background process on a separate request, which slipped past the request-scoped test-mail guard — so a synthetic test could reach a Gravity form's real recipient. v0.2.14 adds an always-on guard that blocks any notification for a Formitor test entry, including those async background sends. Update Gravity sites to v0.2.14.
-
Pause monitoring at any level (admin)
The admin dashboard has a new Monitoring tab to pause synthetic checks for the entire system, a single client, a site, or an individual form. Paused means no test submissions and no alerts until you resume. The per-site pause is also on each site card in the main dashboard.
-
Render-check now names the affected forms
When the browser render-check flags forms that may be broken in-browser, the dashboard now lists exactly which forms and badges each one in the form list — instead of only showing a count. In the grid and compact views the warning is shortened so it no longer overflows the card.
-
Pause monitoring for a site in one click
Each site card now has a Pause/Resume button. Pausing a site stops Formitor from submitting test data and from sending alerts for it until you resume — handy while a site or its forms are being worked on. Paused sites show a “Paused” badge and are dimmed so they don't read as healthy.
-
Test emails can no longer reach client Cc/Bcc recipients
Hardening for synthetic test submissions. When a test notification is redirected to your monitoring inbox, Formitor now strips every To/Cc/Bcc the form itself set, so the monitoring inbox is the only recipient. Previously a client address placed in a form notification's Bcc (or Cc) could still receive the synthetic test email. Update your sites to v0.2.13 to apply.
-
Update the Formitor plugin in one click
No more downloading a zip and uploading it by hand. Formitor now updates like any other WordPress plugin: when a new version is available, your site's **Plugins** screen shows an update notice with a one-click **Update now** button, and you can switch on **automatic updates** if you prefer. A **Check for updates** link (on the Plugins row and on the Formitor settings page) checks for the newest version on demand, and the installed version is shown right on the Formitor page. One-time note: a site needs to be on v0.2.9 or later once (a single manual upload) before one-click updates begin — after that, every future update is one click.
-
See which sites need a plugin update
Your dashboard now flags any site running an outdated Formitor plugin. An **Update** badge appears on the site card showing the installed version and the latest available one, so you can keep your whole fleet current at a glance.
-
Gravity Forms is now supported
Formitor now discovers and monitors **Gravity Forms**, alongside WPForms, Contact Form 7, Elementor, Fluent Forms and Ninja Forms. Each Gravity form is tested end to end like any other: a real (synthetic) entry is submitted, the stored entry is confirmed, and the notification email's delivery is verified. It also handles Gravity forms protected by **reCAPTCHA**, so a CAPTCHA-guarded form still gets a genuine, passing check instead of a false failure. Update the Formitor plugin to v0.2.7 or later on the site to pick it up.
-
In-app notifications
Your alerts now show up right in the dashboard. A new **bell** in the top bar surfaces form failures and recoveries, site outages, SSL expiries, deliverability problems, lead-volume anomalies and checkout issues — each **tagged with the site (and form)** it's about and color-coded by severity. Mark them read, dismiss, or click through. These arrive **alongside** your existing email / Slack / Teams / SMS alerts (not instead of them), so an important heads-up is harder to miss.
-
Formitor now checks your forms in a real browser
Your standard checks confirm the back end accepts a lead. But a form can pass that and still be impossible for a real visitor to submit — a required field hidden by conditional logic, or a popup that never opens. Formitor now also opens each form in a real browser, the way a visitor would, and flags any that can't actually be submitted (and names exactly which ones). See the guide “when a form looks fine but won't submit” in the Help center.
-
Spam-filter-aware form testing (CleanTalk)
Formitor now tests your forms correctly even when your site runs the **CleanTalk** anti-spam filter. Previously CleanTalk could block our synthetic test submissions — usually because they arrive from our monitoring servers rather than a normal browser — and a perfectly healthy form would show up as failing. Signed Formitor tests are now recognised and allowed through, so your results reflect what real visitors actually experience. Your spam protection for real visitors is completely unchanged — only Formitor's own cryptographically-signed test request is let through, and only for that single request. No setup needed: just update the Formitor plugin to **v0.2.3** on each site.
-
Checkout monitoring for WooCommerce
Formitor now monitors your WooCommerce checkout, not just your forms — because a broken checkout means lost sales. On a schedule it places a tiny $0 test order, confirms the order completes and its confirmation email is actually delivered, then deletes the test order. No payment is ever charged, and your store admin is never notified of the test. The checkout page itself is also health-checked every ~10 minutes to catch a white screen or fatal error fast. Turn it on per site from your dashboard with the 🛒 Checkout button (point it at a $0 test product), and the status shows on your dashboard and on the status pages you share with clients. Fluent Cart and SureCart support are on the way.
-
Clearer pass-rate on every form
Each form now shows its pass rate as a count and a percentage — for example 50/65, 77% — so you can see at a glance how many of the recent checks passed, not just the percentage.
-
Tell us what to build next
The Help center now has a "Request a feature" option alongside Contact us and Report a bug. Pick a category, describe the idea, and it comes straight to us — a quick way for beta testers to help shape where Formitor goes.
-
Website uptime & SSL monitoring
Formitor now watches whether each site is actually up — not just whether its forms pass. Every site is checked about every 10 minutes, and a page that loads but shows a white screen, a WordPress critical error, or a maintenance screen now counts as down (a 200 OK that's really broken won't fool it). When a site goes down it's confirmed within about a minute, and recovery is caught just as quickly — fast alerts, without false alarms from a momentary blip. Formitor also tracks each site's SSL certificate and warns you before it expires (30, 14, 7 and 1 day out, and immediately if it's already invalid). Uptime and SSL status show on your dashboard and on the status pages you share with clients.
-
AI assistant — chat & deliverability explainer
Ask the in-app assistant how to use Formitor or how to fix a deliverability issue. It is grounded on your own sites and the latest SPF/DKIM/DMARC results, with a safe, deterministic fallback.
-
Weekly email reports
Get a Monday digest of uptime, failing forms, leads and deliverability across all your sites. Turn it on under Notifications.
-
Help center: What's new and always-current articles
The Help center now includes this "What's new" changelog, and the help articles are kept continuously up to date.
-
Inbox placement & deliverability diagnostics
See where your form emails actually land — Inbox, Promotions or Spam — and get SPF/DKIM/DMARC checks with one-click rechecks and tailored fixes.
-
Account security: passwords and 2FA
Set a password, enable two-factor authentication with any authenticator app, and manage your profile from the dashboard.
-
Sharper deliverability verdicts
Inbox-placement and DKIM checks now read authentication results from real delivered messages, for hard, accurate verdicts instead of guesses.
-
hCaptcha support: full CAPTCHA coverage
Forms protected by hCaptcha are now monitored too — including Contact Form 7 and Elementor. With Turnstile and reCAPTCHA v2/v3 already covered, Formitor now works behind every major CAPTCHA, on all five form plugins.
-
Report a bug or contact us
Reach the team right from the dashboard — bug reports automatically attach helpful context so issues get fixed faster.
-
Client status pages
Share a clean, read-only status page with each client — no login required, with your choice of default view, revocable anytime.
-
reCAPTCHA v2 support completed
Both reCAPTCHA v2 and v3 are now fully supported across all five form plugins.
-
In-app Help & Knowledge Base
A searchable help center covering setup, alerts, deliverability and sharing — plus an AI assistant you can ask about your own sites.
-
reCAPTCHA v3 support across every form plugin
Forms protected by reCAPTCHA v3 are now monitored across Contact Form 7, Fluent Forms, WPForms, Elementor and Ninja Forms.
-
Admin screen polish
Refinements to the in-WordPress admin: the menu-location dropdown stays readable on dark themes and on hover, and long mail-log subjects are clamped with a full-text tooltip. (Versions 0.1.16, 0.1.19, 0.1.21, 0.1.24-0.1.25.)
-
More ways to get alerted
Send alerts to Slack, Discord, Microsoft Teams, SMS (via your own Twilio), or any webhook (Zapier, Make, n8n). Alerts fire only on a change of state.
-
Integration heartbeat
For forms wired to a CRM or automation, Formitor watches that real leads keep reaching your integration — and warns you if they stop.
-
Lead-volume anomaly alerts
Formitor learns each form's normal lead volume and warns you if leads suddenly dry up — catching silent failures even when the form still looks fine, and without ever storing your lead data.
-
Monitors forms behind Turnstile and reCAPTCHA
Test submissions now pass cleanly through forms protected by Cloudflare Turnstile and Google reCAPTCHA. The protection stays fully on for real visitors — only Formitor's own signed test is recognised, so bots gain nothing.
-
Recipient deliverability checks
Each form's notification address is checked for a dead or misconfigured domain — a common cause of silently lost leads.
-
New safety nets: lead-volume alerts and recipient checks
The plugin now powers lead-volume anomaly alerts (a heads-up if enquiries suddenly dry up) and checks each form's notification address for a dead or misconfigured domain — all without ever storing your form data.
-
More resilient on hardened sites
Monitoring keeps working on sites that lock down the WordPress REST API — without weakening their security.
-
Reliability improvements
Behind-the-scenes fixes for consistently accurate delivery checks, including correct matching on sites in timezones behind UTC.
-
Site uptime monitoring
Every site is pinged on a schedule, so you see real uptime percentage and get an alert the moment a site goes down or recovers.
-
Better support for complex forms
Forms with required choices — consent checkboxes, radio buttons and dropdowns — are now detected and completed correctly during tests, including Contact Form 7 required fields.
-
Dashboard redesign and List / Grid / Compact views
A refreshed dark dashboard that follows your system theme, with site logos, starring and drag-to-reorder — plus three views: List, Grid, and a compact "NOC wall" for watching a large fleet at a glance.
-
Core form monitoring
Formitor tests your forms on a schedule and confirms the notification email is actually sent and delivered — alerting you only when something changes (a form starts failing, or recovers), so there is no constant noise.
-
A cleaner in-WordPress setup screen
A redesigned Tools > Formitor screen: one tidy page with Settings and Mail Log tabs, one-click copy of your connection details, and a clean branded look.
-
Find your $0 test product automatically
The 🛒 Checkout dialog now has a **Find $0 products** button: Formitor asks your site's plugin for its $0 products and offers them in a dropdown — pick one and the test product ID (and checkout URL, if empty) fill themselves. Works for WooCommerce product IDs and SureCart price IDs alike, so no more hunting through edit-screen URLs.
-
SureCart checkout monitoring
Checkout monitoring now supports **SureCart** stores alongside WooCommerce. By default Formitor runs a silent pipeline probe (verifies your SureCart connection, test product, and $0 checkout pricing — no order created, no emails sent). Optionally, enable the **full order test** per site to also verify order creation and the customer confirmation email via a test-mode order (heads-up: SureCart platform-sends a TEST-labeled new-order notice to your store's notification recipients on each run, which Formitor can't suppress — that's why it's opt-in). Configure it from the site's 🛒 Checkout dialog; the test product ID accepts SureCart price/product IDs (UUIDs) as well as WooCommerce numeric IDs.
-
Formitor plugin launches
The Formitor plugin (the "spoke") arrives: automatic form discovery across WPForms, Contact Form 7, Elementor, Fluent Forms and Ninja Forms, a signed HMAC-authenticated API, synthetic test tagging, and automatic cleanup. Test submissions are tagged and never reach your real CRM, integrations, or notification inboxes.
Stop losing leads you can't see.
Put a smoke detector on every client’s lead form. Set up in minutes.