Everything you need to know about ProLead's spam filtering, lead scoring, and webhook delivery. Can't find what you're looking for? Contact us.
No. The Starter plan requires no payment details at all. Create an account and start capturing leads immediately - no time limit on the free tier.
Copy the two-line snippet from your form's embed page. Paste the script tag once (in your page head or before </body>), then drop the <prolead-form id="YOUR-UUID"></prolead-form> component anywhere you want the form to appear.
Most users go from signup to a live embedded form in under 10 minutes. Build your form with the drag-and-drop editor, copy the snippet, paste it - done.
ProLead uses four silent checks: a honeypot field (invisible to humans, filled by bots), submission timing (under 3 seconds adds 40 points to the spam score), IP rate limiting (burst abuse adds 15–30 points), and user-agent inspection (headless browsers add 15–20 points). A score ≥70 is blocked; 30–69 is accepted as neutral; below 30 is clean.
No. Only leads that pass bot detection and are accepted into your dashboard count toward your monthly limit.
Yes. The Admin panel shows the spam score and which checks contributed to it for every blocked submission in the audit log.
The timing check alone (40 points) won't block a submission - a score of 70 is required to block. A genuine user who fills the form in under 3 seconds would still be accepted unless other signals also fire.
The score is calculated by a queued background job (ProcessLeadScore) after a lead is accepted. It checks: email MX record validity (+30 pts), phone number E.164 format (+20 pts), field completeness (+25 pts), and data quality signals (+25 pts). The final score determines the lead status.
Scores ≥60 become "prospect" (high-priority follow-up). Scores 30–59 become "neutral" (worth reviewing). Scores below 30 remain "unread" (low-priority). All statuses can be manually overridden in your dashboard.
Scoring runs asynchronously via a queue worker. On a standard setup it completes within a few seconds of submission. The lead is visible in your dashboard immediately; the score updates once the job completes.
No configuration needed. Scoring runs automatically on every accepted lead. The fields checked depend on which fields you included in your form - missing fields score zero for that criterion, not a penalty.
Every delivery includes an X-ProLead-Signature header containing an HMAC-SHA256 signature of the raw request body, keyed with your webhook secret. Verify by computing the same HMAC on your side and comparing the values.
Failed deliveries are retried three times with exponential backoff: 5 minutes after the first failure, then 30 minutes, then 2 hours. If all retries fail, the delivery is marked as permanently failed and visible in your webhook log.
Go to your Profile page → API Tokens tab. Create a named token with the appropriate permissions. Pass it as a Bearer token in the Authorization header of every API request.
Yes. API access with token authentication is available on all plans. The number of API keys you can create depends on your plan.
New accepted leads will be queued and not processed until the next billing cycle, or until you upgrade. Spam-blocked submissions never count toward the limit.
Yes - CSV export is available on all plans from the Leads index page. Filter by date, status, or form before exporting.
Yes. Monthly plans can be cancelled any time with no penalty. Your data remains accessible until the end of the current billing period.
We consider requests case-by-case. Email sales@prolead.io with a brief description of your organisation and we'll see what we can do.
