As for spam from the contact forms, you could look into integrating with https://www.oopspam.com/. It returns score similar to reCaptcha in addition to the outputs from different analyses.