DarkAI

HumanGate protects your WordPress site from AI training crawlers, search engine bots, and unauthorized scraping bots. Add global refusal signals (meta tags, HTTP headers, robots.txt), actively block bots (AI crawlers, scrapers, etc.), and deter large-scale bot extraction with lightweight JavaScript challenges—all without CAPTCHAs or heavy databases.
Perfect for: 
* Journalists protecting sensitive content 
* Activists and independent creators 
* Nonprofits and whistleblower support projects 
* Anyone wanting to opt out of AI training data collection
Core Features:
<ul>
<li>Block Search Engines – Clear, top-level setting to block all search engines (Google, Bing, etc.) via noindex/nofollow meta tags</li>
<li>Global AI Refusal – Adds AI-specific meta tags, HTTP headers (X-AI-Training), and robots.txt rules to refuse AI training crawlers</li>
<li>Active Enforcement Modes – Choose from Signals Only (default), Challenge Mode (JS verification), or Block Mode (403 Forbidden) for AI crawlers and other bots</li>
<li>Bot Challenge System – Automatically detects suspicious bot traffic patterns (burst traffic, sequential traversal, deep-link access) and serves lightweight JavaScript challenges to all bots—not just AI crawlers</li>
<li>Emergency Lockdown – One-click site lockdown with HTTP 451 responses and optional login-only access</li>
<li>SEO Plugin Compatible – Works seamlessly with Yoast SEO, Rank Math, All in One SEO, and other SEO plugins</li>
<li>Privacy-Focused Stats – Lightweight telemetry using WordPress transients (no database bloat, no IP storage)</li>
<li>Performance Optimized – DNS lookup caching and user agent pattern caching for faster response times</li>
<li>Whitelist Support – IP address and user agent whitelists to bypass blocking for trusted sources</li>
</ul>
How It Works:
<ol>
<li>
Block Search Engines – Optional setting to block all search engines (Google, Bing, etc.) using noindex/nofollow meta tags. This is a separate, clear setting at the top of the plugin configuration.
</li>
<li>
AI Refusal Signals – Adds AI-specific meta tags, HTTP headers, and robots.txt rules that tell AI crawlers (GPTBot, ClaudeBot, PerplexityBot, etc.) not to train on your content. This works independently from search engine blocking.
</li>
<li>
Active Enforcement – Optionally block or challenge bots at the HTTP level:
<ul>
<li>Signals Only (default): Sends refusal signals only</li>
<li>Challenge Mode: Requires JavaScript execution verification for all bots</li>
<li>Block Mode: Returns 403 Forbidden to AI crawlers and other unauthorized bots</li>
</ul>
</li>
<li>
Selective Friction – Automatically detects bot scraping patterns and serves invisible JavaScript challenges to any suspicious traffic:
<ul>
<li>Burst traffic detection (12+ pages in 5 seconds) – catches all bots, not just AI crawlers</li>
<li>Sequential traversal detection (machine-like pagination)</li>
<li>Deep-link access detection (direct access to old content)</li>
<li>Auto-completing challenges (no user interaction required)</li>
<li>Works against all types of bots: AI training crawlers, scrapers, data harvesters, etc.</li>
</ul>
</li>
<li>
Emergency Lockdown – Instantly lock down your site with one toggle, returning HTTP 451 responses with optional login-only access.
</li>
</ol>
Design Philosophy:
HumanGate doesn’t try to perfectly identify machines. Instead, it makes large-scale extraction economically inefficient while keeping the experience invisible to 99% of real human users. No CAPTCHAs, no heavy databases, just lightweight protection.
<h3>Development</h3>
For development, bug reports, and contributions, please visit the plugin’s GitHub repository at https://github.com/NomadBuilder/HumanGate

HumanGate

Protect your content from AI training crawlers and scraping bots. Add refusal signals, enforce blocks, and deter large-scale extraction.

yoren

jtzl

JTZL’s Bot Maze protects your WordPress site from unwanted AI crawlers and scrapers by planting invisible trap links that only bots will follow. When a bot enters the trap maze, it gets lost in an ever-expanding maze of realistic-looking fake pages while it quietly builds a suspicion score based on its behavior.
How it works:
<ol>
<li>Trap link injection — Invisible links are added to your real pages. Legitimate visitors never see them, but bots following every link on the page will enter the trap maze.</li>
<li>Lazy maze generation — Trap pages link to more trap pages, generated on demand. The deeper a bot goes, the more time it wastes.</li>
<li>Bot scoring — Each trap page visit adds suspicion points. Deeper traversal earns bonus points. Once a threshold is reached, the visitor is flagged as a bot.</li>
<li>Blocking and tarpitting — Flagged bots can be blocked outright (403), served decoy pages (light tarpit), or slowed down with a deliberate delay (full tarpit).</li>
<li>Crawler verification — Known search engine crawlers (Googlebot, Bingbot, etc.) are verified via reverse DNS and exempted from scoring.</li>
</ol>
Features:
<ul>
<li>Zero impact on legitimate visitors — trap links are hidden from humans and search engines</li>
<li>Configurable injection method (content, footer, or both)</li>
<li>Adjustable scoring thresholds and blocking behavior</li>
<li>robots.txt integration to signal trap paths as disallowed</li>
<li>Analytics dashboard showing bot activity, top IPs, and score distribution</li>
<li>Blocked Bots detail page showing full user agent, score, visit history</li>
<li>Optional comprehensive tracking mode to monitor blocked bot persistence</li>
<li>Automatic log retention and maintenance via WP-Cron</li>
<li>Privacy policy suggestion for GDPR compliance</li>
<li>Geographic heat map of bot activity by country with two GeoIP provider options</li>
<li>MaxMind GeoLite2 local database — all lookups on your server, GDPR-friendly (recommended)</li>
<li>ip-api.com external API — simple setup, no license key required</li>
<li>Lightweight — minimal footprint, geographic tracking is fully optional</li>
</ul>
<h3>Third-Party Services</h3>
This plugin offers optional geographic tracking with two provider options. No data is sent to any external service unless a site administrator explicitly enables one of these providers.
<h4>MaxMind GeoLite2 (Recommended)</h4>
When MaxMind GeoLite2 is selected as the GeoIP provider (Settings > Bot Maze > Geographic Tracking), the plugin downloads the GeoLite2-Country database from MaxMind and performs all IP-to-country lookups locally. No visitor data leaves your server.
<ul>
<li>What is downloaded: The GeoLite2-Country database (~60 MB), updated weekly via WP-Cron.</li>
<li>What is sent to MaxMind: Only your license key during database downloads. No visitor IP addresses are shared.</li>
<li>Requires: A free MaxMind license key from <a href="https://www.maxmind.com/en/geolite2/signup" rel="nofollow ugc">maxmind.com/en/geolite2/signup</a>.</li>
<li>Service website: <a href="https://www.maxmind.com" rel="nofollow ugc">https://www.maxmind.com</a></li>
<li>License: GeoLite2 databases are licensed under <a href="https://creativecommons.org/licenses/by-sa/4.0/" rel="nofollow ugc">CC BY-SA 4.0</a>.</li>
<li>Terms of service: <a href="https://www.maxmind.com/en/geolite2/eula" rel="nofollow ugc">https://www.maxmind.com/en/geolite2/eula</a></li>
</ul>
<h4>ip-api.com</h4>
When ip-api.com is selected as the GeoIP provider, the plugin sends visitor IP addresses to <a href="http://ip-api.com" rel="nofollow ugc">ip-api.com</a> to resolve their country of origin. This data is used to display a geographic heat map of bot activity in the admin dashboard.
<ul>
<li>What is sent: The visitor’s IP address only, over unencrypted HTTP.</li>
<li>When it is sent: At the time a trap page visit is recorded, only while this provider is selected.</li>
<li>Service website: <a href="http://ip-api.com" rel="nofollow ugc">http://ip-api.com</a></li>
<li>Terms of service: <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">https://ip-api.com/docs/legal</a></li>
<li>Privacy policy: ip-api.com does not log queries from the free API endpoint.</li>
<li>Note: The free tier only supports HTTP (not HTTPS). If your site must comply with GDPR, use the MaxMind local database option instead.</li>
</ul>
Geographic tracking is off by default and requires explicit opt-in by a site administrator.

JTZL's Bot Maze

AI bot protection through invisible trap link mazes — hidden links lure bots into a maze of fake content for detection and blocking.

HumanGate vs JTZL's Bot Maze