Has anyone here built a secure contact form workflow for a fully static site without using services like Formspree or Netlify Forms?
I’m experimenting with a setup using Cloudflare Workers to receive POST requests and SendGrid for email delivery, mostly because I want to keep things lightweight and avoid another paid SaaS dependency.
My biggest concern is spam prevention since there’s no traditional backendd doing heavy validation. Right now I’m considering hidden honeypot fields, hCaptcha or Turnstile, rate limiting in the Worker, and maybe origin/referer checks. For people who’ve gone the serverless route, has that been enough in practice? Or are there other lightweight approaches you’d recommend for securely handling form submissions on static sites Curious what setups people are using these days. TIA!