LEADS THAT EXPLAIN THEMSELVES
Every inquiry arrives knowing where it came from
A contact form is the one part of a website that has to work perfectly. This one stops the spam, tells you which channel earned the inquiry — search, an AI assistant, a paid click, a directory — and, when you're running ads, reports the conversion back to your ad account. No plugin, no form-builder subscription, no license to renew.
THE SHORT VERSION
What you get
-
Credit where it belongs
When someone asks an AI assistant for a recommendation and ends up inquiring, the inquiry says so. That is the payoff for being findable by AI, made visible.
-
Spam stops at the door
Five independent defenses, all invisible to a real customer. Nothing to solve, no puzzles, no "prove you are human" friction.
-
Triage at a glance
The channel is in the email subject line, so a busy inbox sorts itself — and you can filter or forward by channel without opening anything.
-
Nothing extra to load
No form builder, no third-party form service, no cookie, no license to renew. Plain HTML posting to your own server, and a couple of kilobytes for the rest.
-
Usable by everyone
Labeled fields, real error messages, full keyboard support, and a confirmation that screen readers announce properly.
-
Honest by default
Whatever is recorded is written into your privacy policy automatically, in plain language, and only while the feature is switched on.
A SAMPLE INQUIRY
What lands in your inbox
One email per inquiry, ready to reply to — the customer's details, their message, and a short "lead source" block underneath. Every inquiry gets the block: when there is nothing to go on it says "Direct" rather than going missing, so a quiet inbox is never mistaken for a broken form.
New contact form submission — GEO / AI-Search Readiness · AI assistant
| Name | Jordan Avery |
|---|---|
| j.avery@example.com | |
| Phone | (845) 555-0142 |
| Company | Harbor Point HOA |
| What can we help with? | GEO / AI-Search Readiness |
Message
Lead source
| Channel | AI assistant |
|---|---|
| Source | chatgpt.com |
| Landing page | /services/#geo-ai-readiness |
| Referrer | https://chatgpt.com/ |
| First touch | 2026-07-29 20:43:09 UTC |
Submitted 2026-07-29 20:43:09 UTC · IP and browser recorded for abuse handling
Read it top to bottom: an AI assistant recommended the AI-search readiness page, the visitor landed there, and the inquiry came in for that same service. "First touch" is when they first found you — which is often days or weeks before they get in touch.
FOUR QUIET STEPS
How it knows
No tracking pixel, no advertising cookie, no third party involved at any point.
-
They arrive
The site notes how someone got here the first time — the website, search engine, or assistant that sent them, and the page they landed on.
-
It is remembered
That first answer is kept in their own browser for 90 days, so it survives them leaving, thinking about it, and coming back later.
-
They inquire
When they finally fill in the form, that history travels with the message — nothing for them to fill in and nothing for you to chase.
-
It is reported
The channel lands in your inbox — and if you run analytics or ads, the same moment is reported there as a conversion, counted only once the message genuinely sent.
EVERY CHANNEL, NAMED
Where inquiries actually come from
Someone asked an assistant, and it recommended you
ChatGPT, Perplexity, Claude, Gemini, Copilot. This is the channel most websites cannot see at all, because only some assistants tag the links they hand out — so a form that waits for a tag reports one of them and stays silent about the rest. This one recognizes the assistant either way, which is what makes the work of being quotable by AI measurable instead of a matter of faith.
They searched, and found you without paying for the click
Google, Bing, DuckDuckGo and the rest, including regional variants. Reported separately from paid clicks, so the value of your organic ranking never gets quietly credited to an ad budget.
They clicked an ad
Google Ads and Microsoft Ads clicks are identified from the click itself, not guessed from the campaign name — so paid stays paid even when a campaign is tagged inconsistently. Whichever campaign, ad group, and search term brought them is listed underneath.
A recommendation, a listing, or a link
Facebook, Instagram, LinkedIn, Nextdoor, YouTube, Reddit — and separately, business directories: Yelp, the Better Business Bureau, Angi, Thumbtack, Houzz. Local businesses usually find one or two of these are worth far more than the rest, and this is how you find out which.
SPAM + ABUSE
Spam stopped, leads never lost
-
An invisible challenge
A silent Cloudflare check runs in the background and is confirmed on our server, not in the browser where it could be faked. Real customers never see it.
-
A trap only bots fall into
A hidden field no human can see. Anything that fills it in is told the message was sent, and it quietly never is.
-
Requests from anywhere else, refused
Only your own website can submit the form. Another site cannot post to it on a visitor’s behalf, even by imitating your address closely.
-
A flood cannot exhaust your mailbox
One address can only submit so many times in a quarter of an hour. Your email account is never the thing that gets suspended.
-
Every field checked on the server
Lengths, formats, and the service list are all enforced where a bot cannot reach — and every rejection waits the same randomized moment, so which check refused it cannot be probed.
-
Never at a real customer’s expense
An odd tracking value or a very long link never loses an inquiry: the extra detail gets trimmed and the message still reaches you.
On the fine print: the invisible challenge is Cloudflare Turnstile, whose free plan covers unlimited verifications — there is no per-submission cost and no volume tier to graduate into. What we can't promise is that every third-party service stays free forever, or that a business with genuinely high volume never needs a paid tier of something adjacent — a mailbox provider's daily sending limits, for instance, are the provider's, not ours. Nothing here bills per lead; we would rather name the edges than let "free" do work it can't.
LIVE, ON THIS PAGE
The form itself
The real component, working. There is also a shorter version for ad landing pages that asks for less — same defenses, fewer fields, higher completion.
Send a message
Tell us what you need. The more detail you can share, the more useful our first reply will be.
ONE FEWER CLICK
Arrive with the right service already picked
Link in from a specific service page, or a service-specific ad, and the form below can land the visitor with that service already selected — no extra click, and no per-page hand-rolled script.
Try it — this link preselects “Security Hardening” in the form below
Get a quote for Security Hardening →
Send a message
Tell us what you need. The more detail you can share, the more useful our first reply will be.
STRAIGHT ANSWERS
What it does not claim to know
-
"Direct" means we do not know
Plenty of browsers and apps pass along nothing at all about where a visitor came from. Those inquiries are reported as direct — an absence of evidence, never dressed up as a channel.
-
One browser at a time
Someone who finds you on their phone and inquires from a laptop looks like two different visitors. Nothing is stitched together across devices — deliberately.
-
Ninety days, then it forgets
A longer decision cycle than that, and the record has expired. Their next visit becomes the new first one.
-
The first step, not the whole journey
It answers "what first brought them here", not every touch in between. That is the question worth answering; anything more would need tracking we are not willing to do.
See it in the rest of the library
Every section on this page is a module you can drop into any page of your site — and each one is brand-aware, fast, and accessible out of the box.