Beherit

Plugin protects WordPress website forms from spam and brute-force attacks with Google reCAPTCHA. There is no additional user-unfriendly options, just choose captcha version, enter keys and optionally set captcha theme, size or badge position – nothing more!
<h4>What forms are protected with reCAPTCHA?</h4>
<ul>
<li>Login form</li>
<li>Reset password form</li>
<li>New password form</li>
<li>Registration form</li>
<li>Comment form</li>
<li><a href="https://wordpress.org/plugins/lite-contact-form/" rel="ugc">Lite Contact Form</a></li>
<li>Contact Form 7</li>
</ul>
The reCAPTCHA verification will be required only for not logged in users.

GreCAPTCHA

Protects WordPress website forms from spam and brute-force attacks with Google reCAPTCHA.

Dmitri Martin

Traffic Monitor gives you full visibility into how people and bots are hitting your site.
Unlike bloated analytics and security plugins, Traffic Monitor focuses on logging raw request data that you control. You’ll know which pages are cached, which bots are visiting, where users are coming from, and how many requests are tied to each IP/browser combination.
Perfect for developers, marketers, and site owners who want fast insights—without handing over their traffic data.
<h3>What Makes It Different</h3>
<ul>
<li>✅ Logs requests for both cached and non-cached pages</li>
<li>✅ Lets you export raw traffic logs as raw CSV for your own analysis</li>
<li>✅ Identifies repeat ad clicks for spotting potential click fraud</li>
<li>✅ Reveals which bots are hitting your site, so you can block them elsewhere (example: Cloudflare)</li>
<li>✅ Tracks IP address, fingerprint, device type, cache status, response code, and more</li>
<li>✅ Displays referrer URLs and query strings</li>
<li>✅ Records the original source of requests by the same visitor as they surf your website</li>
<li>✅ Doesn’t auto-block or inject junk—just clean, useful data</li>
<li>✅ Works great with Cloudflare, caching plugins, and reverse proxies</li>
</ul>
<h3>Key Features</h3>
<ul>
<li>Logs every page request, including IP address, referrer, user-agent, browser, device, method, and more.</li>
<li>Detects cached traffic even if served by Cloudflare, your web host, or a plugin.</li>
<li>Identifies bot traffic by bot name and category.</li>
<li>View click IDs like gclid and fbclid from ad platforms like Google and Meta.</li>
<li>Records repeat ad clicks to detect potential click fraud.</li>
<li>Bulk delete or export logs with one click.</li>
<li>Search, sort, and drill into data from your dashboard.</li>
<li>Built-in help tabs with definitions, setup help, and troubleshooting.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Debug integrations instantly: Know exactly what URLs are being hit, by which devices, and with what parameters. No guesswork.</li>
<li>Spot caching gaps: See which pages are served from cache and which aren’t, even with Cloudflare or plugin-level caching.</li>
<li>Understand real-world traffic: Track entry pages, referrers, devices, and browsers—whether human or bot.</li>
<li>Catch click fraud signals: Identify repeat ad clicks tied to the same IP/user agent fingerprint or session, even if served from cache.</li>
<li>Audit referrers: View exactly which websites or campaigns are driving traffic (including query strings).</li>
<li>Filter out noise: Use bot labels and device types to focus only on human traffic when analyzing patterns.</li>
</ul>

Traffic Monitor

Lightweight traffic logger for WordPress analytics. View, filter, and export page request data; monitor caching; detect bots; and spot click fraud.

GreCAPTCHA vs Traffic Monitor