Bot Defense is a managed CAPTCHA layer for every public form in Odoo. Choose one provider, Cloudflare Turnstile, Google reCAPTCHA v3 or hCaptcha, paste your site and secret keys in Settings, and the suite renders the widget and verifies every visitor server-side on your login, signup, password-reset and website form-builder forms. Each form has its own on and off switch, so you protect exactly what you want.

Unlike a bare CAPTCHA, every blocked attempt is recorded. A Blocked Attempts dashboard shows the IP, provider, form and reason for each block, plus a chart of bot pressure over time by provider, so you can finally prove the spam you stopped. A built-in honeypot catches simple bots with no external call, an IP allow list lets trusted addresses skip the challenge, and an IP deny list blocks known offenders outright.

You also stay in control when a provider has an outage: a fail-open or fail-closed switch decides whether visitors are let through or blocked if the CAPTCHA service cannot be reached, and a Test Keys button validates your keys before you go live. It runs on Odoo Community and Enterprise and depends only on base modules.

In General Settings, enable Bot Defense, pick your provider and paste your keys, then choose which of login, signup, password reset and website forms to protect. The Test Keys button confirms your keys before you go live.

Choose fail-open or fail-closed for a provider outage, turn on the honeypot trap, and list trusted IPs to skip the CAPTCHA or bad IPs to block outright. Every block, honeypot hit and deny-list hit is recorded.

A live log of blocked logins, signups, password resets and website-form spam. Each row shows the IP address, the CAPTCHA provider, the form, the outcome and the reason, whether it was a failed challenge, a honeypot hit or an IP on your deny list.

A stacked chart of blocked attempts per day, split by Cloudflare Turnstile, Google reCAPTCHA v3 and hCaptcha, so you can see trends, spot spikes and prove the value the suite delivers every week.

Cloudflare Turnstile, Google reCAPTCHA v3 and hCaptcha. You pick one active provider in Settings and paste its site and secret keys, and you can switch providers at any time without reinstalling.

The login form, the signup form, the password-reset form and website form-builder forms such as Contact Us. Each one has its own on and off switch, so you protect exactly the forms you want.

It adds a management and visibility layer a bare CAPTCHA does not have: a live dashboard of every blocked attempt, a choice of three providers from one place, an IP allow and deny list, a honeypot fallback, a fail-open or fail-closed switch for outages and a Test Keys button.

You decide. A fail-open or fail-closed setting controls whether visitors are allowed through or blocked when the provider cannot be reached, so a provider outage never locks out your users or your admins by surprise.

No. It runs on Odoo Community and Enterprise and depends only on base modules. The CAPTCHA providers themselves offer free tiers, so you only need a free account and keys from Cloudflare, Google or hCaptcha.

Use the version selector at the top of this page to pick your Odoo release. The app is maintained across the supported versions.

The team behind this module

About CODEerts

Full-Service Odoo ERP Agency  ·  Solutions That Scale

Every module in our store is built from real client work, tested in production and maintained long-term by a team of Odoo certified consultants. When you need more than an app, we deliver the full solution.