Turnstile stops bots. Doorman stops what people type.
Turnstile is free and mostly invisible, and it's good at stopping scripted form floods. It doesn't read the message, so a salesperson or a paid spammer typing into your contact form passes. Doorman reads every submission and tells you why it kept one out.
Free for 1,000 checks a month. Paid plans from $12. No card required.
Example: Doorman screening messages that pass a bot check, each judged in under half a second and delivered or kept out with the reason.
Sound familiar?
The pitches still arrive
SEO offers, redesign pitches and partnership outreach come from real browsers. Turnstile lets them through, by design.
No reason, ever
Verification returns pass or fail with no score and no explanation, so a blocked customer is a mystery.
A script on every protected page
Turnstile needs its widget on the page and a verify call on your server.
Doorman and Cloudflare Turnstile, side by side
| Question | Doorman | Cloudflare Turnstile |
|---|---|---|
| What it checks | What the visitor sent, against what you sell | Browser signals: small invisible challenges and browser checks |
| Human-written pitches and scams | Kept out, with the line that gave it away | Pass |
| What visitors see | Nothing | Usually nothing; a checkbox when it judges a visitor risky |
| Why something was blocked | The exact sentence | No score or reason in the response |
| Setup | A form URL or one server call | A script and widget on the page, plus a server-side verify call |
| Price | Free for 1,000 checks a month, Pro $12 for 25,000 | Free with unlimited challenges; Enterprise via sales |
Their plans and behaviour as published on their own sites, checked 29 September 2026. Sources: developers.cloudflare.com/turnstile, developers.cloudflare.com/turnstile/plans, developers.cloudflare.com/turnstile/get-started/server-side-validation.
Which one is right for you?
Choose Doorman if
- The junk you get is typed by people or written to sound like them
- You want to know why each message was kept out
- You want unsure submissions held for you, not guessed
- You'd rather add nothing to your pages
Choose Cloudflare Turnstile if
- Your only problem is scripted bots flooding a form
- You want a free check with unlimited volume
- You're already on Cloudflare and want it in the same dashboard
Turnstile is free, so keep it in front for bots if you like and let Doorman read what gets past it.
Switch in two minutes
- Hosted form: change the form's action to your Doorman URL and remove the Cloudflare Turnstile script and widget.
- From your server: replace the Cloudflare Turnstile verify call with one doorman.check call; act on deliver, hold or drop.
- Or ask your agent: copy one prompt into Claude Code, Codex or Cursor and it does the swap.
- Start safely: watch mode delivers everything for a week and tags what it would have dropped.
<!-- before: a Cloudflare Turnstile script and widget --> <form action="/contact" method="POST"> … <div class="cloudflare-turnstile-widget"></div> <!-- after: no script, no widget --> <form action="https://withdoorman.com/f/f_yourForm" method="POST"> …
Checked, not guessed
Every decision comes from Doorman's models reading the submission, in milliseconds, with the reason attached.
Labelled test set: 104 invented but labelled contact-form and checkout submissions, judged live; latency is the median of those checks. Questions were not tuned to the set.
Questions
Should I remove Turnstile?
You don't have to. Turnstile filters automated traffic for free; Doorman reads the messages that get through it. Many sites run both.
Does Doorman need Cloudflare?
No. It works with any host or stack: a form action URL or one API call.
What does it cost at volume?
Pro is $12 a month for 25,000 checks and Business is $49 for 250,000. Every plan gets the same models.
How much does it cost?
Free for 1,000 checks a month. Pro is $12 a month for 25,000 and Business is $49 a month for 250,000. Every plan gets the same models. See pricing.
Try it on your own forms
Free for your first 1,000 checks every month. Start in watch mode and see every call before you trust it.