Security

Security at ProForms

ProForms hosts form infrastructure for agencies and businesses. We protect submitted data, restrict abuse, and provide clear channels for security and trust reports.

Encryption

All production traffic is served over HTTPS. Form embeds and submissions use TLS in transit.

Access controls

Dashboard access requires authenticated user accounts, and API access uses scoped API keys.

Abuse prevention

Public form pages are marked noindex/nofollow, submissions are rate-limited, and forms support honeypot, reCAPTCHA, domain allowlists, and blocked sender controls.

Responsible disclosure

Report suspected vulnerabilities to security@proforms.io. Please include reproduction steps and avoid accessing data that is not yours.