For Squarespace

Your Squarespace contact form, without the spam.

Pengon catches the AI-written fake briefs and SEO pitches before they reach your Squarespace inbox.

Start free, no card

or get a lifetime seat for $50

Pengon is in beta. We’re open now.

Your URL yourstudio.com
Active
All systems operational
Export CSV Need help?
Clean submissions
240
Last 30 days
Spam flagged
58
Last 30 days
Bots blocked
31
Last 30 days
Busiest form
Contact form
142 submissions

Submissions over time

Clean Spam Bots
0 13 25 3 wks 2 wks 1 wk Today

Countries

  • Germany 96
  • France 71
  • Italy 63
  • Netherlands 41

Forms

  • Contact form 142
  • Quote request 61
  • Newsletter 35

Pages

  • /contact 121
  • / 88
  • /projects 52
  • /about 30
How it works

More than a CAPTCHA. Layered protection.

INCOMING WHAT PENGON CHECKS PENGON RESULT Real inquiry Spam Message content Hidden honeypot Sender check AI filter Inbox Blocked INCOMING Real inquiry Spam WHAT PENGON CHECKS Message content Hidden honeypot Sender check AI filter Inbox Blocked

AI content filter

A Mistral model reads every submission and catches the AI-written fake briefs and polished SEO pitches that reCAPTCHA waves straight through to your inbox.

A second honeypot

On top of Squarespace’s own spam protection, Pengon adds a second hidden trap with a name bots haven’t seen, so spam tuned to common platforms trips it anyway and never reaches you.

Disposable-email block

Throwaway and temp-mail addresses are spotted and blocked at the door, before a single fake inquiry from one of them ever lands in your inbox.

Setting it up

If you can copy and paste, you can install it.

In Squarespace, go to Website → Pages → Custom Code → Code Injection. No plugins, no app store.

One line, already filled in with your site ID. Copy it straight from your Pengon dashboard, nothing to write.

Drop it into the Header box and press Save. Pengon starts watching within a minute. No rebuild, no republish.

Submit your own contact form once. Your dashboard flips to Connected the moment we catch it.

Pricing

Three ways in. One is a deal.

Start free for 21 days. No credit card. See what we’d block before you pay anything.

For agencies

Agency

from $ 3.50 / site

Volume pricing · billed monthly

  • 1–5 sites $7.00 / site
  • 6–15 sites $6.00 / site
  • 16–30 sites $4.50 / site
  • 30+ sites $3.50 / site
Request agency access

Subscription

$ 8.99 / month

$107.88 per year. Cancel anytime.

  • One Squarespace site
  • Catches the spam reCAPTCHA misses
  • 2-minute install, no Zapier
Start free, no card

Full protection for 21 days. No card, cancel anytime.

20 seats left

Lifetime member

$ 50 $200 once

Launch offer. Lifetime access.

  • One Squarespace site
  • Every future feature included
  • No subscription, ever
Become a lifetime member

Prices excluding VAT. Stripe Tax adds your local rate at checkout.

Full 14-day money-back guarantee on every plan.

FAQ

The questions everyone asks first.

01 Does it work on my Squarespace site? +
Almost certainly, yes. Pengon works on both versions of Squarespace (7.0 and 7.1), every template, and every plan that lets you paste a snippet into Code Injection (Core and above, the same plan you'd need for Google Analytics).
02 Do I have to turn off Squarespace's reCAPTCHA toggle? +
No, leave it on. Squarespace's reCAPTCHA catches scripted bots; Pengon catches the realistic-looking AI spam that gets past it. They work side by side.
03 Why not just switch to Jotform or Typeform? +
You can, and for crude bot spam it helps, mostly because bots target Squarespace's form, so a different embed dodges them. But it's a form swap, not spam protection. You give up your native Squarespace form and inbox, and the spam that's actually growing (AI-written pitches a real person could have typed) still lands, because CAPTCHA checks whether you're human, not whether the message is spam. Pengon keeps your form and reads the content, which is the part those tools can't.
04 What if Pengon ever blocks a real client by mistake? +
Every blocked submission shows up in your dashboard with the model's own reasoning, so you can see exactly why it was flagged. One click on Recover (not spam) and Pengon sends the full message to the email address on your account — a separate email from us, not anything we put back into your Squarespace form inbox. Nothing is permanently hidden. You always have the full record.
05 What happens to my form if Pengon is ever unreachable? +
Forms fail open. If our service is unreachable for any reason, the submission goes through as normal. Your visitor never sees an error, and you never lose a real enquiry because of us. Pengon is additive to Squarespace's existing flow, not in front of it.
06 What if I want to cancel? +
Remove the snippet from Squarespace and Pengon disappears. Your forms keep working exactly as they did before. We'll delete your data on request, no questions asked.
07 I'm not technical. Can I really install this myself? +
Yes. If you've ever pasted a Google Analytics tag, a Plausible or PostHog snippet, or any other tracking script into Squarespace, this is the exact same flow. And if you'd rather we did it for you, reply to your beta invite and we'll walk you through it on a quick call.
08 Is my form data secure and private? +
Yes. Submissions live on Cloudflare's EU edge — encrypted in transit and at rest, isolated per customer, never shared with any third party except Cloudflare's own AI for the classification step. You own your data: one-click "Delete my account" in Settings wipes everything (submissions, sites, billing, your Pengon identity), satisfying GDPR Article 17 right-to-erasure.

Stop dreading your Squarespace inbox. Let Pengon watch it.

Start free, no card

or get a lifetime seat for $50

Pengon is in beta. We’re open now.