Your website can then validate those extra parameters like a pre-shared key beknownst only to your website and your UI tests. One way of establishing that trust between UI tests and your website would be to have your UI tests add extra hidden fields to your form to pass additional parameters as part of your form submission. Yes? Great! In that case, you can extend your website and captcha validation to somehow trust your UI tests and bypass the captcha. If you can't update the website, there's no way to distinguish your UI test from any other bot. No? Then you're going to have a tough time. Well, it depends, are you able to update the server captcha validation code? So how do you keep captchas on your form but also have passing UI tests? But if you have UI tests verifying your forms and a captcha protecting those same forms, your UI tests will no longer function. You'll catch almost all of the spam if you employ multiple of these techniques. Products like Bot fighting mode offered by Cloudflare.Honeypot technique (extra hidden fields to trick spam bots into filling them out).Luckily, there are many ways to prevent this type of spam: As a result, the spam flowed through both systems which is a security risk and waste of time for the salespeople. The website is heavily integrated with their exchange mailbox and CRM system. One of my customers received a LOT of spam via their marketing website. If you put out a form publicly, expect to be bombarded with unsolicited advertisements and links to dangerous websites.

Selenium recaptcha bypass