Magex AI

<p>AI Bot Defender is a comprehensive WordPress security plugin that uses artificial intelligence to protect your website from malicious bots, automated attacks, and security threats. With advanced behavioral analysis and real-time threat detection, it provides enterprise-level security for websites of all sizes.</p>
<h4>Key Features</h4>
<ul>
<li><strong>AI-Powered Threat Detection</strong> – Intelligent analysis of visitor behavior and attack patterns</li>
<li><strong>Multiple AI Provider Support</strong> – Choose between Site Guarding AI (with FREE tokens) or OpenAI Direct</li>
<li><strong>Traffic Monitoring</strong> – Real-time tracking of all website visitors and suspicious activities</li>
<li><strong>Auto-Blocking System</strong> – Automatically block malicious IPs based on threat scores</li>
<li><strong>Honeypot Traps</strong> – Invisible fields that catch automated bots</li>
<li><strong>Login Protection</strong> – Defend against brute force attacks on WordPress login</li>
<li><strong>XSS Detection</strong> – Block Cross-Site Scripting attempts</li>
<li><strong>SQL Injection Protection</strong> – Prevent database attacks</li>
<li><strong>Contact Form 7 Integration</strong> – AI-powered spam detection for form submissions</li>
<li><strong>Comprehensive Dashboard</strong> – Beautiful analytics and security insights</li>
<li><strong>Token Balance Warnings</strong> – 4-level alert system to prevent service interruption</li>
</ul>
<h4>Why Choose AI Bot Defender?</h4>
<p><strong>For Site Guarding AI Users:</strong><br />
* Get started with FREE tokens – no credit card required<br />
* Simple token-based pricing<br />
* Managed infrastructure – no API keys to configure<br />
* OpenAI-powered AI behind the scenes<br />
* Real-time token balance monitoring<br />
* Low balance warning system (< 25,000 tokens)</p>
<p><strong>For OpenAI Users:</strong><br />
* Direct OpenAI API integration<br />
* Full control over API settings<br />
* Cost tracking and usage analytics<br />
* Flexible model selection</p>
<h4>Advanced Security Features</h4>
<ol>
<li>
<p><strong>Intelligent Bot Detection</strong></p>
<ul>
<li>Behavioral pattern analysis</li>
<li>User-agent fingerprinting</li>
<li>Request frequency monitoring</li>
<li>Geographic location tracking</li>
</ul>
</li>
<li>
<p><strong>Attack Prevention</strong></p>
<ul>
<li>Brute force protection</li>
<li>SQL injection blocking</li>
<li>XSS attempt detection</li>
<li>Directory traversal prevention</li>
</ul>
</li>
<li>
<p><strong>Form Security</strong></p>
<ul>
<li>Honeypot field injection</li>
<li>AI-powered spam detection</li>
<li>Real-time form submission analysis</li>
<li>Automatic bot blocking</li>
</ul>
</li>
<li>
<p><strong>Traffic Analysis</strong></p>
<ul>
<li>IP-based visitor tracking</li>
<li>Attack pattern recognition</li>
<li>Threat level assessment</li>
<li>Detailed security reports</li>
</ul>
</li>
</ol>
<h4>Dashboard & Analytics</h4>
<ul>
<li>Beautiful security overview with real-time statistics</li>
<li>Traffic monitoring with IP grouping</li>
<li>Attack log with severity indicators</li>
<li>Token usage tracking</li>
<li>Cost analytics (OpenAI Direct)</li>
<li>One-click IP blocking</li>
<li>Detailed security reports</li>
</ul>
<h4>Support & Documentation</h4>
<ul>
<li>Professional support from Site Guarding team</li>
<li>Comprehensive documentation</li>
<li>Regular updates and improvements</li>
<li>Active development and maintenance</li>
</ul>
<h4>Pro Services Available</h4>
<ul>
<li>24/7 Website Monitoring</li>
<li>Malware Detection & Removal</li>
<li>Firewall Protection</li>
<li>Security Audits</li>
<li>Priority Support</li>
</ul>
<h3>Additional Information</h3>
<h4>System Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher (PHP 8.0+ recommended)</li>
<li>MySQL 5.6 or higher</li>
<li>HTTPS recommended for API communications</li>
</ul>
<h4>Browser Compatibility</h4>
<ul>
<li>Chrome (latest)</li>
<li>Firefox (latest)</li>
<li>Safari (latest)</li>
<li>Edge (latest)</li>
<li>Opera (latest)</li>
</ul>
<h4>Language Support</h4>
<ul>
<li>English (default)</li>
<li>More translations coming soon!</li>
</ul>
<h4>Privacy & Data</h4>
<p>AI Bot Defender respects your privacy:</p>
<ul>
<li>No personal data is collected without consent</li>
<li>Traffic monitoring uses only IP addresses and user agents</li>
<li>AI analysis data is processed securely</li>
<li>All API communications are encrypted</li>
<li>No data is sold to third parties</li>
</ul>
<p>Website ownership verification requires domain validation during registration.</p>
<h3>Third Party Services</h3>
<p>This plugin may connect to the following external services:</p>
<h4>AI API</h4>
<ul>
<li><strong>Purpose:</strong> AI-powered threat analysis</li>
<li><strong>When:</strong> When using AI provider for security analysis</li>
<li><strong>Data Sent:</strong> IP addresses, user agents, attack patterns, form data</li>
</ul>
<h4>OpenAI API</h4>
<ul>
<li><strong>Purpose:</strong> Direct AI analysis when using OpenAI provider</li>
<li><strong>When:</strong> When OpenAI Direct is selected as AI provider</li>
<li><strong>Data Sent:</strong> Security-related text for analysis</li>
<li><strong>Privacy Policy:</strong> <a href="https://openai.com/privacy" rel="nofollow ugc">OpenAI Privacy Policy</a></li>
<li><strong>Service URL:</strong> https://api.openai.com</li>
</ul>
<p>Users have full control over which AI provider to use, and can disable AI features entirely if desired.</p>


Magex AI Bot Defender

Advanced AI-powered bot protection with intelligent threat detection, traffic monitoring, and automated security responses.

POTAR

<p><strong>Checkout Origin Guard</strong> protects your WooCommerce store from fake, fraudulent, or automated checkout attempts by identifying and blocking abusive origins before they clutter your order table or your logs.</p>
<p>The plugin runs <strong>client-origin heuristics</strong>, <strong>IP controls</strong>, and <strong>sequence analysis</strong> to detect non-human traffic and suspicious behavior at checkout. It adds <strong>Company Shield</strong> for business and email sanity checks and an optional <strong>AVS “U” signal handler</strong> for gateways that report “Address not checked / unavailable”.</p>
<p>All controls live on a <strong>single admin screen</strong>; you can adjust sensitivity, manage allowlists and blocklists, and review traffic logs in one place.</p>
<h3>Three layers of protection</h3>
<ol>
<li>
<p><strong>Bot Block (traffic level)</strong><br />
Detects and throttles abusive requests before they become orders:</p>
<ul>
<li>Analyzes user agents, referrers, and known bot signatures  </li>
<li>Watches rapid-fire hits to checkout and wc-ajax endpoints  </li>
<li>Supports monitor, soft, and hard blocking modes  </li>
<li>Built-in allowlist for search engines, uptime monitors, and core WordPress services</li>
</ul>
</li>
<li>
<p><strong>Company Shield (checkout level)</strong><br />
Validates business identity and email quality at checkout:</p>
<ul>
<li>Flags suspicious or synthetic business names  </li>
<li>Detects repeated syllables, odd vowel ratios, and gibberish patterns  </li>
<li>Identifies disposable email domains and role-based accounts (admin, info, sales, etc.)  </li>
<li>Can run in:
<ul>
<li><strong>Monitor</strong>; log and annotate orders  </li>
<li><strong>Soft</strong>; create the order and automatically place it on hold or pending  </li>
<li><strong>Hard</strong>; block checkout with a user-facing error message</li>
</ul>
</li>
</ul>
</li>
<li>
<p><strong>Payment AVS signals (post-payment; optional)</strong><br />
For gateways that expose AVS results in order meta, Checkout Origin Guard can treat “AVS: U; unavailable / not checked” as a <strong>risk signal</strong>:</p>
<ul>
<li>Does not change how your gateway authorizes or captures payments  </li>
<li>Can be configured to:
<ul>
<li>Ignore the signal  </li>
<li>Add an order note only  </li>
<li>Add an order note and bump a risk-score meta field  </li>
<li>Put the order on hold for manual review  </li>
</ul>
</li>
<li>Uses flexible pattern matching; can scan specific gateway meta keys or fall back to scanning all order meta for common “AVS: U” messages such as the PayPal string  </li>
<li>Off by default; you opt in and choose the behavior</li>
</ul>
</li>
</ol>
<h3>Key Features</h3>
<ul>
<li>🛡️ <strong>Bot Block</strong>; Detects and blocks automated bots by analyzing user agents, referrers, and checkout behavior patterns.</li>
<li>⚡ <strong>Rapid Sequence Detection</strong>; Monitors frequency and timing between checkout attempts to identify scripted attacks and card testing activity.</li>
<li>🧠 <strong>Company Shield</strong>; Flags suspicious or AI-generated business names, email domains, and mixed-character spam entries at checkout.</li>
<li>🌎 <strong>Allowlist Controls</strong>; Preserve access for search engines, uptime monitors, and essential WordPress and WooCommerce services.</li>
<li>🔒 <strong>Hard / Soft / Monitor Modes</strong>; Choose between logging only, soft blocking, or full hard blocking.</li>
<li>🧾 <strong>AVS “U” Risk Signals (optional)</strong>; Treat “Address not checked / unavailable” as a post-payment risk signal; add notes, increase risk score, or hold the order.</li>
<li>🗂️ <strong>Log Viewer</strong>; See activity including timestamps, IPs, user agents, paths, and detection outcomes.</li>
<li>🧩 <strong>One-Page Dashboard</strong>; Configure settings, review logs, and manage allow/deny lists from a single screen.</li>
<li>🚫 <strong>Manual Block / Unblock</strong>; Instantly remove or restore access for specific IPs with one click.</li>
<li>💾 <strong>CSV Export</strong>; Download checkout-origin activity logs for security review or record keeping.</li>
</ul>
<h3>Why Online Shops Need it</h3>
<p>WooCommerce checkouts are frequent targets for:</p>
<ul>
<li>Card testing and BIN probing  </li>
<li>Fake business registrations and spam accounts  </li>
<li>Automated scripts hammering your checkout endpoints  </li>
</ul>
<p>Checkout Origin Guard focuses on <strong>checkout behavior and identity quality</strong>, not just generic firewall rules. It helps you:</p>
<ul>
<li>Reduce chargeback and fraud risk  </li>
<li>Keep your order list clean and reviewable  </li>
<li>Shorten the time spent cleaning up junk orders and bogus signups  </li>
</ul>
<p>The plugin works alongside any existing firewall, CDN, or WAF; it does not rely on external APIs or subscriptions. All data stays on your server.</p>
<h3>Use Cases</h3>
<ul>
<li>Prevent card testing or order spam  </li>
<li>Stop bots using nonsense or AI-generated company names  </li>
<li>Detect rapid repeat checkout attempts from the same IP  </li>
<li>Block suspicious POST requests that hit checkout endpoints  </li>
<li>Add an extra layer of review for orders where the gateway reports “AVS unavailable / not checked”  </li>
<li>Maintain cleaner order history and logs for real customers</li>
</ul>
<h3>Credits</h3>
<p>Developed by <strong>Michael Winchester</strong><br />
For documentation and updates, visit https://michaelwinchester.com</p>


Checkout Origin Guard

One-page WooCommerce checkout hardening; bot blocking, rate/sequence checks, business/email heuristics, and optional AVS-based risk signals.

Magex AI Bot Defender vs Checkout Origin Guard