diff --git a/progress.md b/progress.md
index 43e95c2..93f0542 100644
--- a/progress.md
+++ b/progress.md
@@ -34,7 +34,7 @@
 - [x] **SMTP relay configuration** — PHPMailer connected to hMailserver on 10.10.9.31:25 (no auth, no TLS) — relay handled by hMailserver/Mailjet
 - [x] **Test form end-to-end** — verified working (POST returns `{"success":true}`)
 - [ ] **Test email delivery** — confirm message actually arrives at waltwilliams87@gmail.com (need real email to verify)
-- [ ] **Form spam protection** — add honeypot field or privacy-respecting alternative to reCAPTCHA
+- [x] **Form spam protection** — honeypot field confirmed (hidden `website_url` field in form + server-side check in send-contact.php)
 
 ### Hosting & Domain
 - [ ] **Purchase domain** — WilliamsPressureWashingServices.com (John to purchase)