# Does EmailJS expose my account to spam?
A better way to think of EmailJS in terms of security is not as a service that allows you to send emails from your code, but rather as a service that allows you to create a predefined set of emails via the dashboard, and then just trigger the emails from the code. This is quite similar to how emails are usually sent via a proprietary server code, and also to the way products like Intercom or customer.io are working.
Additionally, we've also developed various tools to prevent abuse – for instance, we have IP-based rate limits to prevent bots from spamming, the whitelist of origin, and also support reCAPTCHA tests to make sure that a human is sending the email (although it's up to the developer to turn this feature on).
← Can't I use services like Sendgrid or Mandrill directly? Is it possible to send embedded attachments? →