Payments are experiencing issues due to temporary restrictions in Russia. If your payment does not go through, please submit a support request.Our support team is available 24/7 — we are always here to help with hosting and server issues.We are now accepting requests for dedicated server rental and colocation services in our data center.Reminder: we recommend enabling backups for additional data protection.A new VPS/VDS lineup with NVMe storage and improved performance is now available.Maintenance work on some servers has been completed. All services are operating normally.

MODULE FOR 1C-BITRIX

CleanTalk

Antispam without CAPTCHA, spam filter

The CleanTalk anti-spam module provides multi-level website security without the need for CAPTCHA. The system automatically blocks bot registrations, spam comments in forums and blogs, and spam in Progressive Media tree comments. Protection extends to private user messages, product reviews in 1C-Bitrix modern online stores, order forms, and any custom forms.

Technical details

Published
03.10.2013
Updated
11.09.2026
Version
3.16.0
Installed
More than 1000 times
Suitable editions
'First Site', 'Start', 'Standard', 'Small Business', 'Business'
Responsiveness
Yes
Composite support
Yes
Compatible with Sites24
No
Developer
CleanTalk

What this solution does

The CleanTalk anti-spam module provides multi-level website security without the need for CAPTCHA. The system automatically blocks bot registrations, spam comments in forums and blogs, and spam in Progressive Media tree comments. Protection extends to private user messages, product reviews in 1C-Bitrix modern online stores, order forms, and any custom forms.

The solution operates as a client application for the Cloud Anti-Spam for Websites service. It automatically validates all POST data from visitors, filtering malicious traffic invisibly to users. An optional SpamFireWall feature is available to provide resilience against DoS and DDoS attacks.

Administrators can flexibly configure protection by adding IP addresses, email addresses, and subnets to blacklists or whitelists, and can block access from specific countries. A PHP API is provided for integration with any forms and 1C-Bitrix modules.

Email addresses and IP addresses can be filtered using custom masks or by geographic location (countries). Detailed configuration for black and white lists is available in the documentation.

The Stop Words feature allows users to create a custom list of keywords. All comments containing these words are automatically processed according to the defined rules.

The Anti-Spam Journal records all approved and blocked actions. The default retention period is 7 days; upgrading to the Extended Plan extends storage to 45 days. Each entry includes the timestamp, the site name, the status (allowed or blocked), sender details (name, email, IP), message content, and the server's rejection reason.

Data from the journal can be directly added to black or white lists, or users can access the public database to review spam activity associated with a specific address or IP.

The SpamFireWall module blocks spam bots before they access your website. This reduces server load, improves site speed, and positively affects SEO metrics.

The system performs real-time verification of email address existence. Spammers often use non-existent addresses, which causes issues for site owners: inability to contact the user, failure to deliver notifications regarding account activation, password recovery, or newsletters, and the risk of the IP address being blacklisted by mail servers during mass mailing. CleanTalk Antispam verifies addresses upon submission.

The functionality includes blocking disposable and temporary email addresses.

Blocking users with disposable and temporary email addresses improves message delivery reliability and helps prevent malicious activity, spam bots, and trolling.

The module employs a comprehensive filtering system that includes JavaScript task verification, analysis of form completion time, and checks of the sender's IP address, email, and domain against blacklists. Comments and posts are additionally evaluated for relevance to the site's content and analyzed for spam signatures.

Protection covers registration forms, blog and forum comment forms, threaded comment forms, order forms, and any custom forms. Starting with version 2.0.1, the module operates without requiring changes to site templates.

To test the protection, use the email stop_email@example.com during registration and include stop_word in the body of a forum or blog comment. Detailed statistics on spam attacks are available in the service control panel.

It is possible to configure exclusions for specific pages.

Excluding pages from filtering is supported. Open the custom_config.php file in the module directory and list the required addresses separated by commas.

Example for pages:

example.com/some/thing

example.com/some/one

example.com/some/body

You need to enter:

General iT can connect “Antispam without CAPTCHA, spam filter”, configure it and verify the integration with the existing website.

UPDATE HISTORY

What’s new

49 releases
3.16.0 (10.09.2026)Latest update

Fix. Code. Removing archive of a large message

New. Integration. Intercepting the OnBeforePostAdd event to search for spam when creating a Topic via blogs

Fix. AntiSpam. Skip general contact form checking for the registrations requests.

Ref. CleanTalkDie. Send headers of content type and 403 code.

Upd. BotDetecor. Changing the link to get ct-bot-detector-wrapper.js

Ref. CleanTalkDie. AJAX flow detection improved.

Fix. CheckAllBefore. Decoding a message before sending it to the cloud

New. External Protection. Protection of external forms, Bitrix24

Fix. Code. Syncing RC with library

Fix. Code. Left the option to work only with a token

Upd. Firewall. Atomic approach to updating SFW

New. Settings. Check cURL available. (#38)

3.15.0 (02.06.2026)

Data processing fixed.

Version updated to 3.15.0.

3.14.0 (15.07.2025)

Fix. Options. CSite::GetList() usage fixed on non-variable reference cases.

Fix. Settings. Improved key validation rules.

Fix. Settings. Fixed settings tab render.

Upd. Settings. Add custom server option. (#30)

Fix. Settings. Complete deactivation fixed.

Fix. Common. Add topics creation details.

New. Constant. Ignore rule of 5 approved comments if "CLEANTALK__IGNORE_APPROVED_COMMENTS_COUNT_RULE" is defined

Fix. Remote Calls. Getting home url fixed.

Fix. Settings. Multisite Api-key saving fixed.

3.13.0 (14.10.2024)

* Fix. SFW. Update log on SFW pass fixed.

* Fix. SFW update. Temp tables fixes.

* Fix. SFW. Reduction to a number.

* Fix. Settings. Getting Access Key message fixed.

* New. Settings. Added option for sfw pass get param.

* Fix. USER variable is null.

* Fix. SFW. Writing logs fixed.

* Fix. Frontend data. Mouse moving collecting removed.

* New. Anti-spam. Bot detector support added.

* Fix. Options. JS code fixed.

* New. Options. Support different api key for multisite mode.

* Fix. SFW. Testing block page fixed.

* Fix. Settings. Multisite option getting fixed.

3.12.0 (01.01.1970)

* Fix: all functions in the class CleantalkAntispam are now static for compatibility with php 8

* New. Options. Use bitrix API.

* New. default_option.php. Default settings file.

* Imp. options.php. Handle fail messages.

* Imp. options.php. Old COption legacy removed.

* Fix. Uninstall. Complete deactivation now works correct.

* New. Install. Use default options if no options set (new install or if complete deactivation performed)

* Fix. After tests. Exclusion for SFW module settings that placed after uninstallation process.

* Fix. After review. Old PHP version compatibility in access keys comparison.

* Fix. SFW test. Now displays test page correct and always runs in the session.

* Fix. Settings page. Remove spaces in URL exclusions.

* Fix. Exclusions. Page with URL exclusions now do not load JS.

* Fix. Description wrapped by list.

* Fix. Getting fields any fixed.

* fix: fixed warning in preg_match

* Fix: fixed preg_match in OnBeforeResultAddHandler()

* fixed static functions

* Fix. Skip service request - iblock.vode component ajax loading.

* Fix. SFW. Updating process fixed.

* Mod: SFW send logs is fixed

* Upd. SFW. Implemented personal list.

YOUR PROJECT INFRASTRUCTURE

A home for your website

BEFORE YOU ORDER

Let’s go through the details.

Is installation free?
The solution itself is free. Installation, configuration and customisation services are agreed separately. A compatible platform and an appropriate platform licence are required.
How do I check compatibility?
Compare the supported editions and solution version in the technical details with your project. Before installing on a live website, we recommend making a backup and checking the solution in a test environment.
Can you help with implementation?
We can help install the module, check its settings and verify how it works in your project. Compatibility with other customisations and the scope of work are assessed before we begin.

GENERAL iT

Let’s discuss your project

Получатель: ООО «Дженерал Ай Ти Рус»

1C-BITRIX

Install solution

Enter a domain with or without https://. The installer will open in your website control panel in a new tab.

Solution screenshots

Solution screenshot