Pengon is in open beta. Anyone can start a 21-day free trial, no
card, today. Here’s what we’re building right now,
what’s next, and what we’re exploring. Last updated 4 October 2026.
Building now
In progress
Tuning the filter on real feedback from customers
Every Recover and Report spam click becomes a test. We use them to adjust the filter to the spam our customers really get.
In progress
Remembering which web addresses keep sending spam
Pengon keeps its own list of addresses that send spam again and again, so they are caught faster.
Next
○
Agency plan: look after all your clients' sites from one account
○
An email when spam suddenly rises
Exploring
◦
Shared protection: a sender blocked on one site is watched on all of them
◦
Messages appear in your account the moment they arrive
◦
A way for developers to connect Pengon to other tools (API)
◦
Pengon for comments on EmDash, Cloudflare's new website builder
26 shippedlive in production today
→
✓
An AI reads each message and decides if it is spam
✓
A hidden field that only robots fill in
✓
Throwaway email addresses are caught
✓
Marketing-style email addresses are spotted
✓
A check that the form was opened in a real browser before the message was sent
✓
Messages sent within two seconds of opening the page count as a sign of a robot
✓
Paying works: monthly, yearly, or once for lifetime
✓
Manage your plan yourself: cancel, change your card, download invoices
✓
Delete your account and all your data with one click
✓
Protection against floods of spam: limits per sender and automatic blocking
✓
Your own login: only you see your messages
✓
Works on Squarespace with one line of code
✓
Nothing to type at setup: Pengon notes your site's address from the first message
✓
Status at a glance: Active, Waiting or Inactive
✓
Delete messages one at a time or several at once
✓
Recover and Report spam: every click helps tune the filter
✓
Fewer mistakes with small, real email providers
✓
Download your messages as a spreadsheet
✓
Choose how strict the filter is: Lenient, Balanced or Strict
✓
Protection alerts: an email if your code stops working, and a note the first time spam is stopped
✓
Sign up any time: 21 days free, no card
✓
A weekly email with what was stopped
✓
A faster AI model (Jev) replaced the first one
✓
A backup AI: if the first one is slow or down, a second one runs the same check
✓
Visitor copies: people can get an email copy of what they sent (spam never does)
✓
Stats page: real messages, spam and robots over time
This roadmap reflects current priorities and may change based on
customer feedback. Items in “Exploring” are directions
we’re considering, not commitments. Got something you’d
like Pengon to do? Tell us.
Under the hood, Pengon runs on Cloudflare’s edge -
Workers,
D1,
AI Gateway
and
Pages. Form classification uses
Jev
by TypeSafe, a model that returns a calibrated spam probability rather
than generated text. The marketing site is built with
Astro;
the dashboard with
Vite +
React.
Cloudflare’s
Email Service
sends transactional email;
Clerk
handles authentication.