diff --git a/composer.json b/composer.json
index 1b02415..aed627d 100644
--- a/composer.json
+++ b/composer.json
@@ -23,6 +23,7 @@
         "drupal/core-composer-scaffold": "^8.8",
         "drupal/core-recommended": "^8.8",
         "drupal/google_analytics": "^2.4",
+        "drupal/honeypot": "^2.0",
         "drupal/hook_event_dispatcher": "^1.28",
         "drupal/markdown": "^1.3",
         "drupal/metatag": "^1.11",
diff --git a/composer.lock b/composer.lock
index 738d607..3119a7a 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "11653dcfc59172809431645540fa981b",
+    "content-hash": "45ee4839265d8526697b7d951fc351a2",
     "packages": [
         {
             "name": "asm89/stack-cors",
@@ -2440,6 +2440,68 @@
                 "issues": "https://www.drupal.org/project/issues/google_analytics"
             }
         },
+        {
+            "name": "drupal/honeypot",
+            "version": "2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://git.drupalcode.org/project/honeypot.git",
+                "reference": "2.0.0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://ftp.drupal.org/files/projects/honeypot-2.0.0.zip",
+                "reference": "2.0.0",
+                "shasum": "6f8701f5be173595318e6afe9ff744edb324f85c"
+            },
+            "require": {
+                "drupal/core": "^8.0 || ^9.0"
+            },
+            "type": "drupal-module",
+            "extra": {
+                "drupal": {
+                    "version": "2.0.0",
+                    "datestamp": "1588105107",
+                    "security-coverage": {
+                        "status": "covered",
+                        "message": "Covered by Drupal's security advisory policy"
+                    }
+                }
+            },
+            "notification-url": "https://packages.drupal.org/8/downloads",
+            "license": [
+                "GPL-2.0-or-later"
+            ],
+            "authors": [
+                {
+                    "name": "Jeff Geerling",
+                    "homepage": "https://www.drupal.org/user/213194",
+                    "email": "geerlingguy@mac.com"
+                },
+                {
+                    "name": "geerlingguy",
+                    "homepage": "https://www.drupal.org/user/389011"
+                },
+                {
+                    "name": "vijaycs85",
+                    "homepage": "https://www.drupal.org/user/93488"
+                }
+            ],
+            "description": "Mitigates spam form submissions using the honeypot method.",
+            "homepage": "https://www.drupal.org/project/honeypot",
+            "keywords": [
+                "deterrent",
+                "form",
+                "honeypot",
+                "honeytrap",
+                "php",
+                "spam"
+            ],
+            "support": {
+                "source": "https://git.drupalcode.org/project/honeypot",
+                "issues": "https://www.drupal.org/project/issues/honeypot"
+            }
+        },
         {
             "name": "drupal/hook_event_dispatcher",
             "version": "1.28.0",
diff --git a/config/default/core.extension.yml b/config/default/core.extension.yml
index 34e55b1..b4ee2ac 100644
--- a/config/default/core.extension.yml
+++ b/config/default/core.extension.yml
@@ -21,6 +21,7 @@ module:
   file: 0
   filter: 0
   google_analytics: 0
+  honeypot: 0
   hook_event_dispatcher: 0
   image: 0
   layout_builder: 0
diff --git a/config/default/honeypot.settings.yml b/config/default/honeypot.settings.yml
new file mode 100644
index 0000000..3da9b69
--- /dev/null
+++ b/config/default/honeypot.settings.yml
@@ -0,0 +1,20 @@
+unprotected_forms:
+  - user_login_form
+  - search_form
+  - search_block_form
+  - views_exposed_form
+  - honeypot_settings_form
+protect_all_forms: true
+log: true
+element_name: url
+time_limit: 5
+expire: 300
+form_settings:
+  user_register_form: false
+  user_pass: false
+  node_page_form: false
+  node_post_form: false
+  node_talk_form: false
+  node_workshop_form: false
+_core:
+  default_config_hash: 9bVDfWSa_In6VzTXmy04jJ_3ZQobihKjO9isuuUCPaw