Elementor
+ Atomic Form Actions

Elementor 4 builds new sites with the Atomic editor, and its Atomic Form is fast and fully styleable, but after submit it only offers Email, Collect submissions and a plain webhook. There is no redirect to a thank-you page, no Reply-To, no way to send Sales enquiries to Sales and Support questions to Support, and no spam protection of its own. The Elementor Atomic Form Actions add-on adds those actions without changing how you build the form.

Pick a form on Settings → Atomic Form Actions and switch on what you need: a redirect to a thank-you page with field values in the URL, a Reply-To taken from the visitor's e-mail field, conditional e-mail routing by department, budget or any answer, spam protection with a hidden honeypot and a signed time trap, and a signed webhook to your automation tool.

Spam is stopped before Elementor processes the submission, so nothing is e-mailed, stored or forwarded. Redirects only go to your own site or to hosts you allow, and field values are always URL-encoded, so a visitor can never turn your form into an open redirect. Webhooks refuse local and private network addresses. The log keeps the latest events without any field values. For Elementor 4.0 or newer with Elementor Pro.

The Atomic Form's own script sends each submission to WordPress through admin-ajax.php with Elementor's security token. The add-on listens to that same request just before Elementor Pro does. It checks the token and the form, runs the spam checks (a submission that fails them never reaches Elementor), and sets the Reply-To for every e-mail sent during the request. Only when Elementor answers that the submission succeeded does the add-on send the routed e-mail, call the webhook and fire the developer hook, and then add the redirect address to Elementor's answer; the add-on's small front-end script follows it after checking it once more. If Elementor answers an error, nothing of the add-on runs. The add-on makes no outside connection of its own beyond the licence and update checks and the webhook address you set.