AlmaWeb

<p><strong>Two sides of AI traffic, one powerful plugin.</strong></p>
<p>With the rise of AI platforms like ChatGPT, Claude, Gemini, and Perplexity, your website faces two new realities:<br />
1. <strong>AI bots scraping your content</strong> for training and indexing<br />
2. <strong>Real human visitors discovering your site through AI tools</strong> and clicking through to visit</p>
<p><strong>AlmaWeb AI Visitor Analytics</strong> is the only WordPress plugin that tracks BOTH:</p>
<p><strong>AI Bot Detection</strong><br />
Identify bots from major AI companies (OpenAI, Google, Anthropic, Meta, Amazon), SEO crawlers (Ahrefs, Semrush), aggressive scrapers, and even “stealth” bots hiding behind standard User-Agents. Detect GPTBot, ClaudeBot, Google-Extended, Gemini, Bytespider, Perplexity and 200+ more.</p>
<p><strong>AI Referrer Tracking</strong><br />
Track real human visitors coming FROM AI platforms! When someone asks ChatGPT a question and clicks a link to your site, you will see it. Understand which AI tools are sending you traffic, which pages they land on, and how diverse your AI traffic sources are.</p>
<h4>Why AlmaWeb AI Visitor Analytics?</h4>
<p>In a world where AIs massively consume AND distribute web content, it is crucial to know:</p>
<ul>
<li><strong>Who’s scraping your content</strong> – Precisely identify each AI bot (GPTBot, ClaudeBot, Google-Extended, Gemini, etc.)</li>
<li><strong>Whether ChatGPT is training on your data</strong> – Detect OpenAI crawlers in real time and block them if needed</li>
<li><strong>Which pages are being targeted</strong> – Discover what content interests AI bots the most</li>
<li><strong>Hidden bots</strong> – Detect even bots that mask their identity with standard User-Agents (stealth detection)</li>
<li><strong>Which AI platforms send you traffic</strong> – Track human visitors referred by ChatGPT, Claude, Perplexity, etc.</li>
</ul>
<h4>Key Features</h4>
<p><strong>🔍 Multi-Level Bot Detection</strong></p>
<ul>
<li><strong>Level 1 – User-Agent:</strong> Detects 200+ AI bot signatures (OpenAI, Anthropic, Google, Meta, Amazon, Apple, xAI, Mistral, Cohere, Perplexity, DeepSeek, and more)</li>
<li><strong>Level 2 – IP Range:</strong> Verifies official IP ranges from OpenAI, Anthropic, and Google to catch masked bots</li>
<li><strong>Level 3 – Stealth Detection:</strong> Detects invisible bots like ChatGPT Atlas that use standard browser User-Agents by cross-referencing IP addresses</li>
</ul>
<p><strong>📊 Comprehensive Dashboard</strong></p>
<ul>
<li>Real-time statistics (human visits vs bots)</li>
<li>Evolution charts with Chart.js</li>
<li>Distribution by AI family (OpenAI, Google, Anthropic, etc.)</li>
<li>Top 10 most active bots</li>
<li>Top 10 most scraped pages</li>
<li>Comparison with previous period</li>
<li>Business KPIs: growth rate, peak hours, intent distribution</li>
</ul>
<p><strong>📋 Detailed Logs</strong></p>
<ul>
<li>Advanced filtering by bot type, IP, date</li>
<li>Real-time search</li>
<li>Full CSV export</li>
<li>Complete details: User-Agent, IP, URL, detection method, AI family, bot intent</li>
<li>Special badge for “invisible” bots</li>
</ul>
<p><strong>⚙️ Flexible Configuration</strong></p>
<ul>
<li>Enable/disable tracking</li>
<li>Bad bot blocking option (disabled by default)</li>
<li>Configurable data retention (90 days by default)</li>
<li>Automatic daily cleanup of old data</li>
<li>Exclude logged-in users (optional)</li>
</ul>
<p><strong>🔒 Privacy Respectful</strong></p>
<ul>
<li>No data sent to third-party services</li>
<li>All data stays in your WordPress database</li>
<li>GDPR compliant</li>
<li>No cookies or client-side tracking</li>
<li>Only downloads public data (IP ranges)</li>
</ul>
<h4>Detected Bots</h4>
<p>The plugin detects over 200 different bots in the following categories:</p>
<p><strong>AI Bots (AI Training & Inference):</strong><br />
OpenAI (GPTBot, ChatGPT-User, OAI-SearchBot, Operator, ChatGPT Agent), Anthropic (ClaudeBot, Claude-Web, Claude-SearchBot), Google AI (Google-Extended, Gemini, NotebookLM, GoogleAgent-Mariner), Meta AI, Amazon (Amazonbot, Bedrock, Nova Act), Apple Intelligence, Perplexity, Mistral, xAI (Grok), Cohere, DeepSeek, Character.AI, Kagi, Exa, Tavily, Apify, and 150+ others.</p>
<p><strong>Search Engines:</strong><br />
Google, Bing, Yahoo, DuckDuckGo, Yandex, Baidu, etc.</p>
<p><strong>SEO Crawlers:</strong><br />
Ahrefs, Semrush, Moz, Majestic, etc.</p>
<p><strong>Scrapers & Malicious Bots:</strong><br />
Content scrapers, email collectors, attack bots, etc.</p>
<h4>Advanced Stealth Bot Detection</h4>
<p>Some AI bots like <strong>ChatGPT Atlas</strong> use standard browser User-Agents (Chrome, Safari) to go unnoticed. AlmaWeb AI Visitor Analytics detects them by cross-referencing IP addresses against official IP ranges from <strong>OpenAI, Anthropic, and Google</strong> — all stored locally, no external calls required.</p>
<p><strong>Example:</strong><br />
A visitor with User-Agent “Mozilla/5.0 Chrome/…” from an IP in the OpenAI range will be identified as “ChatGPT Atlas” and marked with an “INVISIBLE” badge in the logs.</p>
<h4>Firewall — Block Unwanted Bots</h4>
<p>Since v1.2.0, the plugin includes a built-in <strong>Firewall</strong> to block bots before they access your content:</p>
<ul>
<li><strong>Block by intention</strong> — Stop training crawlers (GPTBot, ClaudeBot), scrapers, or inference bots</li>
<li><strong>Block by family</strong> — Block all bots from a specific company (ByteDance, Meta, OpenAI, etc.)</li>
<li>Blocked bots receive a <strong>403 response</strong> and are still logged for analysis</li>
</ul>
<h4>Performance</h4>
<ul>
<li><strong>Zero external calls:</strong> IP ranges for OpenAI, Anthropic and Google are stored locally</li>
<li><strong>Minimal impact:</strong> Optimized to not slow down your site</li>
<li><strong>Optimized queries:</strong> Indexes on all important columns</li>
<li><strong>Automatic cleanup:</strong> Daily deletion of old data</li>
</ul>
<p>Protect your content and understand your traffic like never before.</p>
<h3>Official Plugin Page</h3>
<p>Visit the official plugin page for additional resources and support:<br />
<strong>https://almaweb.fr/ai-visitor-analytics</strong></p>
<h3>Privacy & Data Protection</h3>
<p>AlmaWeb AI Visitor Analytics takes your privacy seriously:</p>
<h4>Data Storage</h4>
<ul>
<li>All data is stored locally in your WordPress database</li>
<li>No external services receive any data from your site</li>
<li>You have full control over data retention (configurable from 1 to 365 days)</li>
<li>Automatic daily cleanup removes old data based on your settings</li>
</ul>
<h4>What Data is Collected</h4>
<p>The plugin collects the following information for each visit:<br />
* User-Agent string<br />
* IP address<br />
* Requested URL<br />
* HTTP referrer<br />
* Request method (GET, POST, etc.)<br />
* HTTP headers (Accept, Accept-Language, Accept-Encoding)<br />
* Timestamp</p>
<p>This data is used solely for bot detection and traffic analysis on your own site.</p>
<h4>GDPR Compliance</h4>
<ul>
<li>No cookies are set by this plugin</li>
<li>No client-side tracking or JavaScript-based analytics</li>
<li>IP addresses are stored for bot identification purposes only</li>
<li>You can configure data retention to comply with your privacy policy</li>
<li>Users can request data deletion through standard WordPress data export/erasure tools</li>
</ul>
<h4>What This Plugin Does NOT Do</h4>
<ul>
<li>Does NOT send your data to external servers</li>
<li>Does NOT track end-user behavior for advertising</li>
<li>Does NOT use third-party analytics services</li>
<li>Does NOT set cookies</li>
<li>Does NOT require user consent (server-side logging only)</li>
</ul>
<h3>Third-Party Services</h3>
<p>This plugin may connect to the following third-party services <strong>only</strong> to download publicly available bot IP ranges:</p>
<h4>OpenAI IP Ranges</h4>
<ul>
<li><strong>GPTBot:</strong> https://openai.com/gptbot.json</li>
<li><strong>ChatGPT-User:</strong> https://openai.com/chatgpt-user.json</li>
<li><strong>SearchBot:</strong> https://openai.com/searchbot.json</li>
</ul>
<p><strong>Purpose:</strong> Verify IP addresses to detect OpenAI bots, including stealth bots like ChatGPT Atlas<br />
<strong>Data sent:</strong> None – the plugin only downloads public IP range information<br />
<strong>Caching:</strong> IP ranges are cached for 24 hours to minimize requests<br />
<strong>Privacy Policy:</strong> https://openai.com/privacy</p>
<h4>Important Notes</h4>
<ul>
<li><strong>No data from your site is ever sent to these services</strong></li>
<li>The plugin only downloads publicly available IP range lists</li>
<li>These requests happen server-side (not from visitors’ browsers)</li>
<li>IP ranges are cached locally for 24 hours</li>
<li>If the external service is unavailable, the plugin continues to work using User-Agent detection</li>
</ul>
<h4>Bundled Libraries</h4>
<p><strong>Chart.js v4.5.1</strong> (bundled locally)<br />
* Used for dashboard visualizations<br />
* No external connections required<br />
* Loaded only on admin pages<br />
* License: MIT</p>
<p>All third-party code is included in the plugin and does not require external CDN connections.</p>
<h3>Support & Documentation</h3>
<h4>Getting Help</h4>
<p>If you need help with the plugin, here are your options:</p>
<ol>
<li><strong>Documentation:</strong> Check the plugin settings page for inline help and tooltips</li>
<li><strong>WordPress Support Forum:</strong> Post your questions on the WordPress.org support forum</li>
<li><strong>Official Page:</strong> Visit https://almaweb.fr/ai-visitor-analytics for contact and support</li>
</ol>
<h4>Reporting Bugs</h4>
<p>If you find a bug, please report it on the WordPress.org support forum with:<br />
* WordPress version<br />
* PHP version<br />
* Steps to reproduce the issue<br />
* Any error messages you’re seeing</p>
<p>You can also contact us directly through our official page at https://almaweb.fr/ai-visitor-analytics</p>
<h4>Feature Requests</h4>
<p>We welcome feature suggestions! Please submit them on the WordPress.org support forum or contact us through https://almaweb.fr/ai-visitor-analytics</p>
<h3>Contributing</h3>
<p>This plugin is open source and welcomes contributions!</p>
<h4>Translation</h4>
<p>The plugin is available in French and English. To add a new language:</p>
<ol>
<li>Copy <code>languages/almaweb-ai-visitor-analytics.pot</code></li>
<li>Translate using Poedit or similar tool</li>
<li>Save as <code>almaweb-ai-visitor-analytics-{locale}.po</code> and compile to <code>.mo</code></li>
<li>Contact us through https://almaweb.fr/ai-visitor-analytics to submit your translation</li>
</ol>
<h3>Credits</h3>
<p><strong>Developed by:</strong> Yohan Ziri<br />
<strong>Company:</strong> AlmaWeb (https://almaweb.fr)<br />
<strong>License:</strong> GPLv3 or later</p>
<p><strong>Special Thanks:</strong><br />
* Chart.js for beautiful visualizations<br />
* The WordPress community for feedback and support<br />
* All users who help improve the bot detection library</p>


AlmaWeb AI Visitor Analytics

Detect GPTBot, ClaudeBot, Gemini and 200+ AI crawlers. Track which AI bots scrape your content and block unwanted scrapers.

Opportify

<p><strong>Opportify Fraud Protection</strong> stops fake sign-ups, form spam, bot submissions, and fraudulent leads on every WordPress form. It works silently, in real time, with no friction for real users.</p>
<p><iframe loading="lazy" title="Opportify&apos;s Fraud Protection" src="https://player.vimeo.com/video/1179038954?dnt=1&app_id=122963" width="750" height="422" frameborder="0" allow="autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share" referrerpolicy="strict-origin-when-cross-origin"></iframe></p>
<p>Unlike CAPTCHA, which frustrates genuine visitors and is easily bypassed by modern bots, Opportify works invisibly in the background. It analyzes over 100 signals per submission: behavioral patterns, device fingerprints, email risk, IP reputation, and VPN or proxy detection. Each submission is scored so you can automatically allow, flag, or block it.</p>
<h4>Who This Is For</h4>
<p><strong>WordPress site owners and marketers</strong> tired of spam flooding their contact forms, fake leads cluttering their CRM, or bots registering fake accounts.</p>
<p><strong>WooCommerce store owners</strong> who need to stop fraudulent checkouts, fake account registrations, and disposable email sign-ups before they cause damage.</p>
<p><strong>Developers and agencies</strong> who want an API-backed, code-configurable fraud layer with per-integration control, risk metadata on entries, and support for version-controlled config files.</p>
<p><strong>Security and operations teams</strong> who need explainable risk scores with a per-submission breakdown of every contributing factor.</p>
<h4>Why Not Just Use CAPTCHA?</h4>
<p>CAPTCHA hurts conversion rates for real users and is routinely bypassed by modern bots. Opportify takes a different approach: it observes behavioral signals before the form is even submitted, analyzes every signal at the moment of submission, and delivers a risk verdict your site can act on. All of this happens in under a second, with no puzzles, no friction, and no false positives for legitimate visitors.</p>
<h4>What It Detects</h4>
<ul>
<li>Disposable and temporary email addresses</li>
<li>High-risk and known-fraud email domains</li>
<li>VPN, proxy, Tor exit node, and datacenter IP addresses</li>
<li>Bot and automated browser behavior</li>
<li>Device fingerprint anomalies</li>
<li>Geographic and velocity anomalies</li>
<li>Mismatched or suspicious behavioral signals</li>
</ul>
<h4>Risk Levels</h4>
<p>Every submission receives a score and one of five plain-language risk levels:</p>
<ul>
<li><strong>Lowest</strong> and <strong>Low</strong>: Healthy submissions from genuine users with clean signals.</li>
<li><strong>Medium</strong>: Worth a closer look, but not necessarily fraudulent.</li>
<li><strong>High</strong> and <strong>Highest</strong>: Risky submissions. Likely spam, bots, or fraud. Block or flag automatically.</li>
</ul>
<h4>Per-Integration Actions</h4>
<p>For each supported form plugin, you can independently configure what happens at each risk level:</p>
<ul>
<li><strong>Allow</strong>: The submission proceeds normally.</li>
<li><strong>Flag</strong>: The submission proceeds, but the risk score, level, and contributing factors are saved as metadata visible in WP Admin.</li>
<li><strong>Block</strong>: The submission is rejected with a customizable error message.</li>
</ul>
<h4>Supported Form Integrations</h4>
<ul>
<li>WordPress Comments</li>
<li>WordPress User Registration</li>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a> Checkout</li>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a> Account Registration</li>
<li><a href="https://wordpress.org/plugins/contact-form-7/" rel="ugc">Contact Form 7</a></li>
<li><a href="https://wordpress.org/plugins/wpforms-lite/" rel="ugc">WPForms</a></li>
<li><a href="https://www.gravityforms.com/" rel="nofollow ugc">Gravity Forms</a></li>
<li><a href="https://elementor.com/" rel="nofollow ugc">Elementor Pro Forms</a></li>
<li><a href="https://wordpress.org/plugins/ninja-forms/" rel="ugc">Ninja Forms</a></li>
<li><a href="https://wordpress.org/plugins/fluentform/" rel="ugc">Fluent Forms</a></li>
<li><a href="https://wordpress.org/plugins/forminator/" rel="ugc">Forminator</a></li>
<li><a href="https://wordpress.org/plugins/formidable/" rel="ugc">Formidable Forms</a></li>
<li><a href="https://wordpress.org/plugins/mailchimp-for-wp/" rel="ugc">Mailchimp for WordPress</a> (MC4WP)</li>
</ul>
<h4>Supported Newsletter and CRM Integrations</h4>
<ul>
<li><a href="https://wordpress.org/plugins/mailin/" rel="ugc">Brevo</a> (formerly Sendinblue)</li>
<li><a href="https://wordpress.org/plugins/email-subscribers/" rel="ugc">Email Subscribers</a></li>
<li><a href="https://wordpress.org/plugins/fluent-crm/" rel="ugc">FluentCRM</a></li>
<li><a href="https://wordpress.org/plugins/convertkit/" rel="ugc">Kit</a> (formerly ConvertKit)</li>
<li><a href="https://wordpress.org/plugins/mailerlite-official/" rel="ugc">MailerLite</a></li>
<li><a href="https://wordpress.org/plugins/mailpoet/" rel="ugc">MailPoet</a></li>
<li><a href="https://wordpress.org/plugins/newsletter/" rel="ugc">Newsletter</a></li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Real-time fraud and spam detection on every form submission</li>
<li>Client-side behavioral fingerprinting via the Opportify JS SDK (loads automatically, no configuration needed)</li>
<li>Server-side AI analysis via the Opportify Fraud Protection API</li>
<li>5-level risk scoring with explainable contributing factors</li>
<li>Per-integration configuration: set different rules for contact forms, registrations, and checkouts independently</li>
<li>Reports dashboard with risk distribution charts, submission log, and health checklist</li>
<li>Risk metadata columns in WP Comments, Users, and WooCommerce Orders list tables</li>
<li>Config file support (<code>opportify-config.php</code>) for DevOps, Bedrock, Trellis, and staging pipelines</li>
<li>Skip admins option to avoid false positives during development and testing</li>
<li>Automatic log cleanup via WP-Cron (configurable retention, default 30 days)</li>
<li>Compatible with WP Rocket, LiteSpeed Cache, W3 Total Cache, Autoptimize, and other caching plugins</li>
<li>Translated into 10 languages: German, Spanish, French, Italian, Japanese, Dutch, Polish, Portuguese (Brazil), Russian, and Simplified Chinese</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>The Opportify JS SDK loads silently in your site header. It collects behavioral signals such as mouse movement, keystroke timing, scroll depth, and device entropy, then generates a session fingerprint.</li>
<li>When a form is submitted, the SDK attaches a behavioral token to the submission automatically.</li>
<li>The Opportify PHP SDK sends the submission to the Fraud Protection API for analysis: email risk, IP intelligence, device signals, behavioral correlation, and more.</li>
<li>Based on your configured thresholds, the plugin allows, flags, or blocks the submission instantly.</li>
</ol>
<p>No CAPTCHA. No user friction. No separate configuration per form.</p>
<h4>Reports Dashboard</h4>
<p>The plugin’s Reports page gives you a clear view of your site’s submission health:</p>
<ul>
<li><strong>Health checklist</strong>: confirms your API keys, connection status, and active integrations at a glance</li>
<li><strong>Risk distribution chart</strong>: donut chart showing the split between Healthy, Caution, and Risky submissions</li>
<li><strong>Submissions by integration</strong>: bar chart showing which forms receive the most risk</li>
<li><strong>Submission log</strong>: filterable table with date, integration, email, IP, score, risk level, action taken, and contributing factors</li>
<li><strong>Dashboard link</strong>: access detailed trend analysis and advanced filters in the Opportify Dashboard</li>
</ul>
<h4>External Services</h4>
<p>This plugin connects to two Opportify services:</p>
<ul>
<li><strong>Fraud Protection API</strong> (<code>https://api.opportify.ai</code>): analyzes each submission server-side using your private API key. Data sent: email address, IP address, and behavioral signals from the JS SDK.</li>
<li><strong>JS SDK CDN</strong> (<code>https://cdn.opportify.ai</code>): loads the client-side behavioral telemetry script using your public key. This script collects behavioral signals (typing cadence, mouse movement, device entropy, and automation indicators) that are correlated server-side with the fraud analysis. The plugin automatically fetches the latest script version from the CDN manifest and injects it into your site header.</li>
</ul>
<p>Please review <a href="https://www.opportify.ai/legal/privacy-policy" rel="nofollow ugc">Opportify’s Privacy Policy</a> and <a href="https://www.opportify.ai/legal/terms-conditions" rel="nofollow ugc">Terms of Service</a> before activating the plugin. By activating, you agree to the transmission of submission data to Opportify’s API for fraud analysis.</p>
<h3>Support</h3>
<p>For questions, feedback, or assistance, visit <a href="https://www.opportify.ai/contact-us" rel="nofollow ugc">https://www.opportify.ai/contact-us</a>.</p>


Opportify Fraud Protection

Stop fake leads, form spam, and bot registrations before they reach your database. AI-powered fraud scoring across 100+ signals. No CAPTCHA required.

AlmaWeb AI Visitor Analytics vs Opportify Fraud Protection