Go to Settings > Security in the form builder and enable reCAPTCHA v2 with your Site Key and Secret Key. The public submit endpoint is also rate-limited, and Allowed Origins restricts which websites may submit the form.