Magex AI

<p>AI Bot Defender is a comprehensive WordPress security plugin that uses artificial intelligence to protect your website from malicious bots, automated attacks, and security threats. With advanced behavioral analysis and real-time threat detection, it provides enterprise-level security for websites of all sizes.</p>
<h4>Key Features</h4>
<ul>
<li><strong>AI-Powered Threat Detection</strong> – Intelligent analysis of visitor behavior and attack patterns</li>
<li><strong>Multiple AI Provider Support</strong> – Choose between Site Guarding AI (with FREE tokens) or OpenAI Direct</li>
<li><strong>Traffic Monitoring</strong> – Real-time tracking of all website visitors and suspicious activities</li>
<li><strong>Auto-Blocking System</strong> – Automatically block malicious IPs based on threat scores</li>
<li><strong>Honeypot Traps</strong> – Invisible fields that catch automated bots</li>
<li><strong>Login Protection</strong> – Defend against brute force attacks on WordPress login</li>
<li><strong>XSS Detection</strong> – Block Cross-Site Scripting attempts</li>
<li><strong>SQL Injection Protection</strong> – Prevent database attacks</li>
<li><strong>Contact Form 7 Integration</strong> – AI-powered spam detection for form submissions</li>
<li><strong>Comprehensive Dashboard</strong> – Beautiful analytics and security insights</li>
<li><strong>Token Balance Warnings</strong> – 4-level alert system to prevent service interruption</li>
</ul>
<h4>Why Choose AI Bot Defender?</h4>
<p><strong>For Site Guarding AI Users:</strong><br />
* Get started with FREE tokens – no credit card required<br />
* Simple token-based pricing<br />
* Managed infrastructure – no API keys to configure<br />
* OpenAI-powered AI behind the scenes<br />
* Real-time token balance monitoring<br />
* Low balance warning system (< 25,000 tokens)</p>
<p><strong>For OpenAI Users:</strong><br />
* Direct OpenAI API integration<br />
* Full control over API settings<br />
* Cost tracking and usage analytics<br />
* Flexible model selection</p>
<h4>Advanced Security Features</h4>
<ol>
<li>
<p><strong>Intelligent Bot Detection</strong></p>
<ul>
<li>Behavioral pattern analysis</li>
<li>User-agent fingerprinting</li>
<li>Request frequency monitoring</li>
<li>Geographic location tracking</li>
</ul>
</li>
<li>
<p><strong>Attack Prevention</strong></p>
<ul>
<li>Brute force protection</li>
<li>SQL injection blocking</li>
<li>XSS attempt detection</li>
<li>Directory traversal prevention</li>
</ul>
</li>
<li>
<p><strong>Form Security</strong></p>
<ul>
<li>Honeypot field injection</li>
<li>AI-powered spam detection</li>
<li>Real-time form submission analysis</li>
<li>Automatic bot blocking</li>
</ul>
</li>
<li>
<p><strong>Traffic Analysis</strong></p>
<ul>
<li>IP-based visitor tracking</li>
<li>Attack pattern recognition</li>
<li>Threat level assessment</li>
<li>Detailed security reports</li>
</ul>
</li>
</ol>
<h4>Dashboard & Analytics</h4>
<ul>
<li>Beautiful security overview with real-time statistics</li>
<li>Traffic monitoring with IP grouping</li>
<li>Attack log with severity indicators</li>
<li>Token usage tracking</li>
<li>Cost analytics (OpenAI Direct)</li>
<li>One-click IP blocking</li>
<li>Detailed security reports</li>
</ul>
<h4>Support & Documentation</h4>
<ul>
<li>Professional support from Site Guarding team</li>
<li>Comprehensive documentation</li>
<li>Regular updates and improvements</li>
<li>Active development and maintenance</li>
</ul>
<h4>Pro Services Available</h4>
<ul>
<li>24/7 Website Monitoring</li>
<li>Malware Detection & Removal</li>
<li>Firewall Protection</li>
<li>Security Audits</li>
<li>Priority Support</li>
</ul>
<h3>Additional Information</h3>
<h4>System Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher (PHP 8.0+ recommended)</li>
<li>MySQL 5.6 or higher</li>
<li>HTTPS recommended for API communications</li>
</ul>
<h4>Browser Compatibility</h4>
<ul>
<li>Chrome (latest)</li>
<li>Firefox (latest)</li>
<li>Safari (latest)</li>
<li>Edge (latest)</li>
<li>Opera (latest)</li>
</ul>
<h4>Language Support</h4>
<ul>
<li>English (default)</li>
<li>More translations coming soon!</li>
</ul>
<h4>Privacy & Data</h4>
<p>AI Bot Defender respects your privacy:</p>
<ul>
<li>No personal data is collected without consent</li>
<li>Traffic monitoring uses only IP addresses and user agents</li>
<li>AI analysis data is processed securely</li>
<li>All API communications are encrypted</li>
<li>No data is sold to third parties</li>
</ul>
<p>Website ownership verification requires domain validation during registration.</p>
<h3>Third Party Services</h3>
<p>This plugin may connect to the following external services:</p>
<h4>AI API</h4>
<ul>
<li><strong>Purpose:</strong> AI-powered threat analysis</li>
<li><strong>When:</strong> When using AI provider for security analysis</li>
<li><strong>Data Sent:</strong> IP addresses, user agents, attack patterns, form data</li>
</ul>
<h4>OpenAI API</h4>
<ul>
<li><strong>Purpose:</strong> Direct AI analysis when using OpenAI provider</li>
<li><strong>When:</strong> When OpenAI Direct is selected as AI provider</li>
<li><strong>Data Sent:</strong> Security-related text for analysis</li>
<li><strong>Privacy Policy:</strong> <a href="https://openai.com/privacy" rel="nofollow ugc">OpenAI Privacy Policy</a></li>
<li><strong>Service URL:</strong> https://api.openai.com</li>
</ul>
<p>Users have full control over which AI provider to use, and can disable AI features entirely if desired.</p>


Magex AI Bot Defender

Advanced AI-powered bot protection with intelligent threat detection, traffic monitoring, and automated security responses.

trustsig

<p><strong>TrustSig Security protects WordPress forms and API endpoints from scripted bots and brute-force attacks.</strong> No puzzles. No “I am not a robot” checkboxes. No third-party signup required to start. Coverage depends on the protection mode you choose — see “Protection modes” below.</p>
<p><a href="https://ps.w.org/trustsig-security/assets/screenshot-1.png" rel="nofollow ugc"></a><br />
<a href="https://ps.w.org/trustsig-security/assets/screenshot-2.png" rel="nofollow ugc"></a><br />
<a href="https://ps.w.org/trustsig-security/assets/screenshot-3.png" rel="nofollow ugc"></a></p>
<h4>Why TrustSig</h4>
<ul>
<li><strong>Protects every important form out of the box</strong> — login, registration, comments, password reset, WooCommerce checkout, BuddyPress signup, Easy Digital Downloads, Elementor Pro forms, WPForms (including the Mesmerize / Materialis contact form), Contact Form 7, SureForms, and any custom form via shortcode.</li>
<li><strong>Stops brute-force login attempts</strong> with built-in lockout after repeated failures.</li>
<li><strong>Invisible to humans</strong> — real visitors are verified in under a second by a non-interactive browser check. No CAPTCHA, no images to click.</li>
<li><strong>Three protection modes</strong> — Monitor (log only), Challenge (default, soft block with auto-retry), Enforce (hard block).</li>
<li><strong>Zero configuration</strong> — activate the plugin and protection is live immediately. Anonymous free tier needs no account.</li>
<li><strong>Works with caching plugins, WPML, multisite and most themes</strong> — forms are signed server-side with a per-site secret.</li>
<li><strong>Developer-friendly</strong> — PHP helper <code>trustsig_verify()</code>, REST endpoint <code>/wp-json/trustsig/v1/verify</code>, filters and actions for custom forms.</li>
<li><strong>Optional admin-ajax and REST API guard</strong> for advanced sites.</li>
<li><strong>GPLv2</strong> — fully open source.</li>
</ul>
<h4>How it works</h4>
<p>TrustSig injects a lightweight browser SDK, signs every rendered form with a per-site secret, and verifies submissions against the TrustSig Edge service. Real visitors pass an invisible check in about a second; scripted clients that never run JavaScript are stopped.</p>
<p>When a request arrives without a valid token, TrustSig does not silently fail<br />
open. Depending on the mode you choose it serves a lightweight “please wait”<br />
interstitial that re-verifies the browser and then transparently continues the<br />
original request — or blocks it.</p>
<p>The plugin works out of the box with <strong>no account and no API keys</strong> (anonymous<br />
free tier). Connecting a TrustSig dashboard account is optional and only adds<br />
analytics and higher limits.</p>
<h4>Protection modes</h4>
<ul>
<li><strong>Monitor</strong> — verify and log only, never block. Used for safe rollout; the<br />
upgrade path also pins existing sites here so behaviour never changes<br />
silently on update.</li>
<li><strong>Challenge</strong> (default for new installs) — a missing or invalid token shows<br />
the interstitial, then continues or blocks.</li>
<li><strong>Enforce</strong> — a missing or invalid token is blocked immediately.</li>
</ul>
<h4>What it protects</h4>
<p>Browser forms are protected automatically with no code:</p>
<ul>
<li>WordPress core — login, registration, comments, lost/reset password</li>
<li>WooCommerce — login, registration, checkout, pay order, lost password</li>
<li>BuddyPress — registration</li>
<li>Easy Digital Downloads — login, registration</li>
<li>Elementor Pro forms</li>
<li>WPForms — contact and other forms, on by default (covers the Mesmerize / Materialis contact section)</li>
<li>Contact Form 7 — feedback submissions, on by default (guarded on the REST endpoint CF7 submits to)</li>
<li>SureForms — form submissions, on by default (guarded on the REST submit-form endpoint)</li>
<li>Any other form (site-wide “protect all forms” option, the <code>[trustsig_form]</code><br />
shortcode, or a hidden <code>trustsig-response</code> input)</li>
</ul>
<p>It also includes optional brute-force lockout for repeated failed logins, an<br />
opt-in admin-ajax / REST API guard, and a developer verification API.</p>
<h4>For developers</h4>
<ul>
<li>PHP: <code>trustsig_verify( array( 'token' => $t, 'action' => 'my_form' ) )</code><br />
returns <code>pass</code> | <code>fail</code> | <code>challenge</code>. Filters: <code>trustsig_pre_verify</code>,<br />
  trustsig_result. Action: <code>trustsig_blocked</code>.</li>
<li>REST: <code>POST /wp-json/trustsig/v1/verify</code> with <code>{ "token": "..." }</code>.</li>
</ul>
<h4>Known limitations</h4>
<ul>
<li>XML-RPC (<code>xmlrpc.php</code>) is intentionally out of scope and is not verified.<br />
Disable XML-RPC separately if it is unused on your site.</li>
<li>admin-ajax and the REST API are only protected when explicitly enabled in<br />
Settings, to avoid breaking third-party integrations.</li>
<li>File-upload and AJAX submissions cannot show the interstitial; under<br />
Challenge or Enforce mode a missing token on those is blocked, never<br />
silently allowed.</li>
</ul>
<h3>External services</h3>
<p>This plugin relies on the <strong>TrustSig Edge</strong> service to decide whether a request<br />
comes from a human or an automated client. This bot-detection verdict cannot be<br />
produced locally, so the service is required for the plugin’s core<br />
functionality.</p>
<p><strong>Service provider:</strong> TrustSig — https://trustsig.eu</p>
<p><strong>Remote script loaded in the browser:</strong><br />
    https://edge.trustsig.eu/trustsig.js is loaded on pages that contain a<br />
protected form, on the login screen, and on the verification interstitial. The<br />
script runs the non-interactive browser check and produces a verification<br />
token.</p>
<p><strong>Data sent from the visitor’s browser / your server to<br />
    https://edge.trustsig.eu/verify:</strong></p>
<ul>
<li>the TrustSig verification token generated by the SDK in the visitor’s browser;</li>
<li>your site’s host name (e.g. <code>example.com</code>) on the anonymous free tier, or, if<br />
you connect a dashboard account, the secret key you entered;</li>
<li>as part of any HTTPS request, the visitor’s IP address and standard request<br />
metadata (such as the user-agent) are visible to the service.</li>
</ul>
<p><strong>When data is sent:</strong> when the SDK loads on a protected page, when a protected<br />
form is submitted, and once per browser when the optional verified-session<br />
cookie is bootstrapped.</p>
<p><strong>Data stored locally on your site:</strong> TrustSig writes a verification log to<br />
your own WordPress database (custom tables) that includes visitor IP addresses,<br />
the action attempted, and the verdict. This data is not sent to TrustSig; you<br />
can clear it at any time from Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> TrustSig <span aria-hidden="true" class="wp-exclude-emoji">→</span> Tools.</p>
<p>By installing and activating this plugin you (the site administrator) consent to<br />
this data being sent to TrustSig so that requests can be verified. Inform your<br />
own site’s visitors as required by your local privacy obligations.</p>
<ul>
<li>Terms of Service: https://trustsig.eu/terms-of-service/</li>
<li>Privacy Policy: https://trustsig.eu/privacy</li>
</ul>


TrustSig Security


Deployment was easy, I am not tech savy but was able to get it running in less than a minute. I always had constant email spam from my site, after installing TrustSig it dropped to zero. 10/10


Easy setup and spam stopped

Stop bots, spam and brute-force attacks on every WordPress form. No CAPTCHA. No account. No keys. Installs and protects in one click.

Magex AI Bot Defender vs TrustSig Security