Bot and abuse protection
Turnstile Setup
Cloudflare Turnstile setup guidance and Worker verification template for BellPathOS forms.
SOC 2 readinessLocal-first privacyClient-owned secretsCloudflare hardened
Bot protection
Cloudflare Turnstile setup
Add Turnstile to contact, support, setup, and future checkout/restore forms. The browser widget proves a client interaction; the token must still be verified server-side through a Worker before trusting the submission.
1. Cloudflare Dashboard → Turnstile → Add site
2. Add bellpathos.com and www.bellpathos.com
3. Save the site key in public page configuration
4. Save the secret key as a Worker secret, not in browser JavaScript
5. Verify tokens in workers/turnstile-verify-worker-template.js