Bot Traffic Shield Pro is the complete bot detection, traffic control, and AI crawl intelligence platform for WordPress. Move beyond simple User-Agent matching to behavioral bot scoring, multi-tier rate limiting, fake search bot verification, and edge defense.
Bot Traffic Shield comes with powerful out-of-the-box features trusted by over 700+ websites worldwide, with zero lock-in and zero bloat.
Instantly detects and stops known AI crawlers before pages load, returning clean HTTP 403 Forbidden with proper no-cache directives.
Core search engines (Google, Bing, Yahoo) are permanently whitelisted with no admin toggle, making it impossible to break SEO rankings by accident.
Individual on/off switches for 15+ AI providers (OpenAI, Anthropic, Google-Extended, Meta, Apple, Perplexity, ByteDance, Common Crawl, etc.).
Control regional and specialized search engines (Baidu, Yandex, DuckDuckGo, SEO crawlers). Block non-relevant regional traffic with full safety prompts.
Built-in interactive line trends and doughnut charts with 7, 14, and 30-day filters. Summary KPI cards for total blocks, today's blocks, and top scrapers.
Generates real-time Disallow rules for blocked AI bots and explicit Allow rules for search engines, protecting against both polite and rogue crawlers.
Browse through historical blocks with IP, bot identifier, User-Agent, and timestamps. One-click filtered CSV exports with Excel UTF-8 BOM encoding.
Add custom User-Agent strings line by line, manage master on/off status, and monitor live "Blocked Today" counts directly in the WP admin topbar.
Zero external API calls on frontend, automatic 60-day stats pruning, local Chart.js, and instant lookups that preserve your server resources.
Designed from the ground up for publishers, WooCommerce stores, digital agencies, and high-traffic sites needing intelligent automated traffic control.
Move beyond easily spoofed User-Agents. Analyzes request frequency, burst velocity, missing browser headers (Accept-Language, Referer), cookie behavior, and sequential crawl paths to produce a 0–100 Bot Score with confidence levels.
Surfaces automated crawlers and rogue scrapers that aren't on any public blocklist yet. See their request velocity, pages crawled, and crawl interval with 1-click actions: Block, Allow, or Create Custom Rule.
Don't just choose between Allow and Block. Slow down aggressive crawlers with requests-per-minute, requests-per-hour, and burst limits. Escalates progressively: JS challenge, HTTP 429 throttling with Retry-After, and temporary bans.
Comprehensive IPv4/IPv6 access lists with automatic expiration: 10 minutes, 1 hour, 24 hours, 7 days, or permanent bans. Track per-IP Bot Scores, 404 error spikes, unique paths crawled, and operator notes.
Malicious bots easily pretend to be Googlebot or Bingbot by forging User-Agent headers. Pro runs reverse and forward DNS verification on claimed search bots, exposing and blocking impostors while awarding Verified Badges to real ones.
Categorize AI bots by purpose: Training Bots (GPTBot, CCBot), AI Search Engines (Perplexity), AI Assistants, and Autonomous Agents. Apply 1-click policy profiles: Strict Protection, Balanced, or AI-Friendly.
Protect sensitive areas like /docs/*, /pricing/*, or /premium-content/* while letting search crawlers index /blog/*. Build rules visually using bot scores, country codes, request rate, and HTTP methods.
Never block real human visitors. When Bot Score is inconclusive (e.g. 70–85), issue a transparent background JavaScript check, browser cookie challenge, or Cloudflare Turnstile verification before taking action.
Full-spectrum traffic visualization: Human vs Known Bots vs AI Crawlers vs Suspicious Traffic. Hourly activity heatmaps reveal scraping schedules, URL targeting shows what bots want, and bandwidth savings are calculated.
Detect unusual traffic spikes against rolling 7-day hourly baselines. Get notified instantly via Email, Slack, Discord, Telegram, or JSON Webhooks when scrapers surge or new unknown crawlers hit your content.
Compare declared policy with observed crawler behavior in real time. Flag rogue crawlers that ignore Disallow directives and convert violations into hard 403 blocks with one click.
Observe your website's traffic for 7 days without blocking anything. Review automated traffic patterns, suspicious IPs, and newly discovered crawlers, then roll out tailored protection rules in one click with safe rollback.
Dedicated protection modules stopping automated competitors from scraping WooCommerce prices, product stocks, catalog data, and abusing checkout coupons. Guards /wp-json/ and throttles XML-RPC abuse.
Push your bot rules and blocked IPs directly to the Cloudflare Edge, stopping unwanted traffic before it even touches your server. Also generates validated Apache .htaccess, Nginx, and LiteSpeed rules.
Never wait for WordPress plugin releases to block brand-new AI crawlers. Pro automatically synchronizes with our central bot intelligence database for new signatures, categories, and detection heuristics.
Generate scheduled monthly PDF and CSV reports for stakeholders or clients showing total crawlers blocked, top targeted articles, and bandwidth saved. White-label branding options available on Agency plans.
Built with native WordPress standards and Chart.js, Bot Traffic Shield provides a fluid, responsive admin experience with zero learning curve.
Monitor blocked crawler traffic with interactive Chart.js line charts, breakdown doughnuts, and KPI summary cards (Total Blocks, Today's Blocks, Active Rules, Top Scraper).
Toggle individual AI providers with a single click. Includes Select All / Deselect All bulk actions, provider descriptions, and exact User-Agent strings.
Easily toggle the entire shield on/off, control logging status, and input custom User-Agent signatures one per line with immediate real-time enforcement.
Search and inspect every intercepted bot attempt with full timestamps, bot names, IP addresses, and User-Agents. Export reports to CSV for spreadsheet analysis.
Live "Blocked Today" counter in the top admin bar with instant jump links to Analytics, AI Rules, Activity Log, and Settings with zero overhead.
No complicated API keys to create. No external DNS changes. Just install and your content is shielded.
Search “Bot Traffic Shield” in WordPress Plugins or upload zip file.
Immediate 403 protection begins instantly with safe defaults.
Unlocks behavioral scoring, rate limiting, IP bans & alerts.
Watch traffic heatmaps, prevent scraping, and review insights.
A transparent breakdown of what's included in the free WordPress.org plugin vs our premium platform.
| Features & Capabilities | Free Version | Pro Edition |
|---|---|---|
| 1. Bot Detection & Intelligence | ||
| Known AI Crawler Blocking (User-Agent based) Blocks GPTBot, ClaudeBot, Bytespider, Perplexity, etc. | ✓ 15+ Groups | ✓ 50+ Providers + Cloud Sync |
| Behavioral Bot Detection Detects automated bots that disguise their User-Agent | – | ✓ Multi-Signal Engine |
| Heuristic Bot Score (0–100) Velocity, header absence, cookie & crawl patterns | – | ✓ Yes (Human to Confirmed Bot) |
| Unknown Bot Discovery Identifies rogue crawlers not on any public blocklist | – | ✓ Yes with 1-click mitigation |
| "Why Was This Blocked?" Explainability Audit trail of signals behind every automated action | Basic reason | ✓ Complete signal breakdown |
| Central Bot Intelligence Feed New crawlers recognized without waiting for plugin updates | Static list | ✓ Automated Cloud Sync |
| 2. Traffic Control & Rate Limiting | ||
| Enforcement Action Types Available responses to suspicious visitor requests | Allow or Block | Allow, Block, Rate Limit, Challenge |
| Granular Rate Limiting Requests per min, per hour, burst limit & cooldowns | – | ✓ Multi-Tier Limits |
| Progressive Escalation JS challenge → HTTP 429 Retry-After → Temporary Ban | – | ✓ Automatic Progressive Steps |
| Targeted Audience Controls Separate threshold rules for Bots, Anonymous & Logged-in | – | ✓ Independent audience switches |
| 3. Access & Search Engine Rules | ||
| Core Search Engine Whitelist (Google, Bing, Yahoo) Permanently protected so SEO can never break by mistake | ✓ Always Allowed | ✓ Always Allowed |
| Regional Search Engine Controls Toggle Baidu, Yandex, DuckDuckGo, social crawlers | ✓ In v1.0.6 | ✓ Advanced Controls |
| Fake Search Bot Verification Reverse & forward DNS verification to catch fake Googlebots | – | ✓ Reverse/Forward DNS Engine |
| IP Management & Timed Bans 10 min, 1 hr, 24 hr, 7 days or permanent with auto-expiry | – | ✓ IPv4 & IPv6 with Expiry |
| AI Crawler Purpose Presets Strict, Balanced, AI-Friendly one-click profiles | – | ✓ 1-Click Policy Presets |
| 4. Rules & WordPress Specific Shielding | ||
| Path-Based Crawl Rules e.g. Allow AI on /blog/*, block AI on /docs/* or /pricing/* | – | ✓ Path Wildcard Engine |
| Visual Condition Rule Builder Combine bot scores, country codes, paths, and rates | – | ✓ Visual Rule Engine |
| WooCommerce Scraping Shield Protect products, pricing, stock, cart & coupon abuse | – | ✓ Dedicated WooCommerce Shield |
| REST API & XML-RPC Protection Guard /wp-json/ endpoints and throttle XML-RPC abuse | – | ✓ API Endpoints Shield |
| 5. False-Positive Prevention | ||
| Safe / Learning Mode 7-day passive audit with 1-click recommended rules | – | ✓ Passive Audit & Safe Rollout |
| Bot Challenges (JS & Cookie) Transparent verification before issuing blocks | – | ✓ Lightweight Browser Check |
| Cloudflare Turnstile Integration Interactive challenges for suspicious visitors | – | ✓ Turnstile & CAPTCHA |
| 6. Analytics, Heatmaps & Reporting | ||
| Analytics Timeframe Historical retention of blocked and traffic logs | 30 Days (60-day auto-prune) | ✓ 1 Year / Unlimited Retention |
| Traffic Spectrum Analytics Human vs Known Bot vs AI Crawler vs Suspicious Traffic | Blocked bots only | ✓ Full Spectrum Breakdown |
| Hourly Traffic Heatmaps Activity breakdown by hour and day of week | – | ✓ Interactive Heatmap |
| Most Targeted URLs & Per-Bot Views Discover which content bots are crawling the most | – | ✓ Deep URL Insights |
| robots.txt Compliance Monitor Compares declared Disallow policy with actual requests | Generates rules only | ✓ Real-time Violation Monitor |
| Bandwidth Savings Estimator Calculates hosting bandwidth saved by stopping crawlers | – | ✓ Bandwidth Prevention Metric |
| Scheduled PDF & Email Reports Automated monthly reports for clients and teams | Manual CSV only | ✓ Automated PDF & Email Delivery |
| 7. Alerts & Edge Integrations | ||
| Rolling Anomaly & Spike Detection Alerts when traffic jumps unexpectedly against baseline | – | ✓ Rolling 7-Day Baseline |
| Multi-Channel Instant Notifications Dispatch to your preferred communications app | Admin bar only | ✓ Email, Slack, Discord, Telegram, Webhook |
| Cloudflare Edge Rule Synchronization Block crawlers at the CDN edge before reaching server | – | ✓ Cloudflare Edge Sync |
| Web Server Rule Generation Apache .htaccess, LiteSpeed, Nginx & MU-Plugin | – | ✓ Validated Server Rule Engine |
| 8. Licensing & Support | ||
| Site License Options Scale from personal sites to agency client portfolios | Single Site | 1, 5, 25 or Unlimited Sites |
| White-Label Client Mode Rebrand plugin name and author for agency clients | – | ✓ Agency & Unlimited Plans |
| Customer Support Direct access to core engineering team | Community Forum | ✓ Priority Email & Ticket Support |
Pick the plan that fits your website portfolio. All plans include all core Pro features, updates, and priority assistance.
Ideal for content creators, bloggers, and single business sites.
The ideal solution for growing publishers, businesses & freelancers.
Tailored for digital agencies, web studios, and site managers.
Uncapped protection for high-scale agencies and enterprise networks.
Real site owners and developers share their experience using Bot Traffic Shield in production.
“I'm using server level security measures and Cloudflare Pro. Bots were still hammering my site and my CPU usage was through the roof. Other WordPress firewall plugins were not effective, or were putting up too many barriers to legitimate traffic. This started blocking bots immediately and showed me exactly what was being blocked. Exactly what I needed.”
“Really solid plugin. Installs in seconds, starts blocking AI bots right away, and the analytics dashboard is clean and useful. Love that you can toggle individual crawlers and that real search engines stay completely safe. Lightweight, no fuss, does exactly what it should. Highly recommend.”
“Amazing – this plugin has been so effective in a very short time blocking 'visitor bots' I have never even heard of. Easy to install, I am grateful for the reduced rubbish traffic. Thank You!”
“I tried it and it does what you say. The ability to determine which regional bots to allow and which to block (like Baidu or Yandex) was addressed directly by the developer in version 1.0.6. I really appreciate the speed of updates and great responsiveness!”
Everything you need to know about Bot Traffic Shield, AI crawler defense, and Pro features.
Absolutely not. Core search engines (Googlebot, Bingbot, Yahoo Slurp) are always protected in our core architecture and cannot be disabled in the settings. Allowed crawlers are checked and granted entry before any blocking logic runs. In Pro, we also run reverse and forward DNS verification to guarantee that legitimate search engines are always recognized and never blocked.
Smart Bot Detection moves beyond User-Agent strings. It evaluates request velocity (requests per minute and burst frequency), missing standard browser headers (like Accept-Language, Accept, and Referer), session cookie behaviors, rapid 404 hit rates, and sequential crawl path traversal. This computes an explainable 0–100 Bot Score with confidence levels, allowing you to throttle or challenge automated traffic that pretends to be a regular browser.
Many aggressive scrapers forge their User-Agent to look like Mozilla/5.0 (compatible; Googlebot/2.1) to bypass basic firewalls. Bot Traffic Shield Pro performs automated Reverse DNS and Forward DNS lookup against the connecting IP address to verify that the hostname actually belongs to Google or Microsoft. If the DNS check fails, the impostor is flagged and blocked with a Fake Bot notice.
No, quite the opposite! The plugin runs at priority 1 on the init hook before WordPress theme templates, page builders, or database queries are loaded. When a bot is blocked or throttled with an early 403 or 429 response, PHP execution terminates immediately, saving your CPU, RAM, and database connection pools from being consumed by scrapers.
Instead of an all-or-nothing approach, Rate Limiting lets you permit helpful scrapers or ambiguous bots while restricting them to reasonable thresholds (e.g. 30 or 60 requests per minute). When a visitor exceeds the limit, they receive an HTTP 429 Too Many Requests response with a Retry-After cooldown header. If the abuse continues, Pro temporarily blocks their IP address.
robots.txt is a polite advisory protocol: honest search engines respect it, but aggressive AI scraping bots and data harvesters frequently ignore it. Bot Traffic Shield combines both: it publishes proper Disallow directives in your virtual robots.txt while actively enforcing real-time 403 HTTP headers on page requests for dual-layer security.
No. We take privacy seriously. All request analytics, daily counters, and block logs remain stored locally in your own WordPress database. There are no external tracking scripts or telemetry on your frontend, making the plugin 100% GDPR-compliant. Pro Bot Intelligence only pulls downward signature updates without transmitting your visitor traffic.
Every premium tier (Starter, Professional, Agency, and Unlimited) includes a 14-day risk-free free trial powered by Freemius. You can test behavioral bot detection, rate limiting, and all Pro features completely free for 14 days before committing. Choose between Monthly billing, Annual billing (discounted rates), or Lifetime one-time licenses for permanent peace of mind. You can cancel anytime during the trial with zero cost.
Join over 700+ WordPress website owners preventing AI bots from harvesting their intellectual property and wasting server resources.
