
ExpressJS
Node.js
Ruby on Rails
Laravel
Django
Flask
Meteor
ASP.NET
nForms.eu
Formspree.io
reCAPTCHA
hCaptcha
Basin
ALTCHA
ALTCHA Forms
ForgeForms
nForms is the form backend that replaces two tools developers are tired of gluing together: reCAPTCHA and manual ARIA accessibility code.
SHA-256 Proof-of-Work challenges run in the browser (~200ms). Invisible to users, computationally expensive for bots at scale. No cookies, no puzzles, no user interaction needed.
Composite scoring combines PoW verification, timing analysis, honeypot detection, and AI spam scoring.
Add data-validate="required|email" to your fields. nForms automatically injects aria-invalid, aria-describedby, role="alert", and manages focus on errors. WCAG 2.2 AA compliant, EAA-ready since June 2025.
All data processed and stored on Cloudflare Workers, D1, and R2 in Frankfurt. No US data transfers, no tracking cookies, no fingerprinting. GDPR by architecture, not by checkbox.
ExpressJSnForms.eu's answer:
nForms is in public beta. Early users are solo developers and small agencies in Germany building client websites. The contact form on nforms.eu is a live demo โ dogfooding the product.
nForms.eu's answer:
nForms is the only form backend that ships bot protection and accessible form validation in a single script tag. Most tools make you choose โ Formspree for the backend, reCAPTCHA for spam, then manual ARIA code for accessibility. nForms handles all three. Zero cookies, zero CAPTCHA puzzles, EU-only data storage.
nForms.eu's answer:
If you care about GDPR compliance, accessibility, or just hate cookie banners: nForms uses Proof-of-Work instead of CAPTCHA, so there are no cookies and no US data transfers. The same script tag also adds WCAG 2.2 AA validation automatically โ no hand-written ARIA code needed. Setup is one HTML attribute, not an npm install or backend integration.
nForms.eu's answer:
Web developers and agencies building static sites, landing pages, or JAMstack projects who need a form backend with built-in spam protection. Especially relevant for EU-based developers who need GDPR-compliant infrastructure and EAA-compliant accessible forms without extra tooling.
nForms.eu's answer:
I kept adding the same three things to every client site: reCAPTCHA (cookies, US data, consent banners), manual ARIA attributes for accessibility, and a form backend like Formspree. Each solved one problem but created new ones. I built nForms to replace all three with a single script tag โ Proof-of-Work for bots, automatic ARIA for accessibility, EU-only infrastructure for GDPR. Solo-built on Cloudflare Workers.
nForms.eu's answer:
Cloudflare Workers (Hono framework) for the API, Cloudflare D1 for the database, Cloudflare R2 for file storage โ all EU jurisdiction. Next.js for the dashboard and marketing site. SHA-256 WebWorkers for client-side Proof-of-Work computation. Resend for transactional email.
Based on our record, ExpressJS seems to be more popular. It has been mentiond 493 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Backend: Node.js & Express for file handling and metadata extraction. - Source: dev.to / 3 months ago
Casbin provides an external policy engine if your permission model grows complex enough that a centralized JS function becomes hard to maintain. Open Policy Agent serves the same purpose for multi-service architectures. Node.js and Express.js documentation cover the middleware pattern in detail. - Source: dev.to / 3 months ago
Many REST frameworks also ship with limited security controls enabled by default. Express.js , a minimal web framework, does not include rate limiting or input validation out of the box and relies on middleware for these concerns. Django REST Framework includes throttling features, but they are not enabled by default. - Source: dev.to / 4 months ago
Nearly every server-side web framework uses some version of MVC. Django calls it MTV (Model-Template-View), Rails follows classic MVC, and Express.js gives you the building blocks to implement your own version. - Source: dev.to / 4 months ago
For this guide, you will use the authentication proxy approach with Express. This gives you full control over authentication logic and RBAC. It also integrates well with the Descope MCP Express SDK, which is designed to allow you to easily add MCP specification-compliant authorization to your MCP server. The authentication proxy sits between clients and the MCP server, and validates every request before forwarding... - Source: dev.to / 4 months ago
Node.js - Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications
Formspree.io - Just send your form to our URL and we'll forward it to your email.
Ruby on Rails - Ruby on Rails is an open source full-stack web application framework for the Ruby programming...
reCAPTCHA - reCAPTCHA is a free security service that protects your websites from spam and abuse.
Laravel - A PHP Framework For Web Artisans
hCaptcha - Do you use a captcha to keep out bots? hCaptcha is a drop-in replacement for reCAPTCHA that earns website owners money and helps companies get their data labeled.