QuoteWise has a hidden honeypot field that catches simple bots on its own. If spam still gets through, turn on reCAPTCHA v3 under Quotes, then Settings, then Form.
Go to google.com/recaptcha/admin, add your site, and choose reCAPTCHA v3. You get a Site Key and a Secret Key.
Tick Enable reCAPTCHA v3, paste both keys, and save.
Score threshold is 0.5 by default. Higher is stricter. Only change it if real customers are being blocked, or spam is still arriving.
Only when you switch this on: a token from the visitor browser, your site key, and their IP address. No quote contents, names, or email addresses. Leave it off and QuoteWise contacts nothing outside your site.