Secure Static Site Contact Forms via Cloudflare and Resend
A new guide by developer speckx demonstrates how to integrate Eleventy and Cloudflare Pages Functions to handle server-side logic without a traditional backend.
Static site developers can now implement secure, serverless contact forms by combining edge functions with third-party email APIs. A technical guide published on March 9, 2026, outlines a specific architecture to bridge the gap between static frontends and functional email delivery.
Developer speckx, writing for nooshu.com, detailed a solution for sites built with the Eleventy (11ty) static site generator. The implementation utilizes Cloudflare Pages Functions to manage server-side logic, reCAPTCHA v3 to prevent automated spam submissions, and Resend to handle the final email delivery. By offloading the form processing to the edge, the developer avoids the need to maintain a dedicated server while ensuring that submissions are validated before being sent.
The Static Site Backend Gap
Static site generators like Eleventy are prized for their speed and security, but they inherently lack a built-in backend to process user input. Traditionally, developers have been forced to choose between expensive third-party form services or the complexity of managing their own server infrastructure. The rise of serverless edge computing has created a middle ground, allowing developers to write small, discrete functions that trigger only when a user submits a form.
Implications for Edge Architecture
This approach highlights a broader shift toward modern serverless edge architectures. By integrating security layers like reCAPTCHA v3 directly into the function workflow, developers can maintain the performance benefits of a static site without sacrificing essential security. This model reduces the attack surface of the website and minimizes latency by processing the form submission closer to the user's physical location.
Future Considerations
As the ecosystem evolves, developers are exploring further consolidation of these tools. On Hacker News, user dom96 noted that Cloudflare's expanding suite, including Turnstile and its email sending beta, could eventually allow a single provider to handle the entire pipeline. While the current guide focuses on the Resend and reCAPTCHA integration, the trend suggests a move toward more unified, provider-native security and delivery tools for the static web.