H. Bakhtiari

mentotex

MentoGuard protects your WordPress forms from spam bots using behavioral analysis and server-side token verification — completely GDPR-compliant with no data sent to Google or any third party.
Currently supports Contact Form 7, with more form builders coming in future releases.
<h4>How It Works</h4>
MentoGuard uses three independent protection layers:
<ol>
<li>Signed token — every form load generates a one-time server-side token. Bots submitting without loading the page are instantly blocked.</li>
<li>Page time check — measures time between page load and submission entirely server-side. Bots submit in milliseconds; real users take seconds.</li>
<li>Behavioral score — JavaScript tracks how the visitor interacts with the form (timing, mouse movement, keyboard vs paste, field order) and assigns a spam score.</li>
</ol>
<h4>Key Features</h4>
<ul>
<li>GDPR compliant — zero external servers, zero Google, zero third parties</li>
<li>Contact Form 7 native tag support — place [mentoguard] inside your CF7 form editor</li>
<li>Scripts load only on pages with active forms — zero SEO or page speed impact on other pages</li>
<li>Spam log dashboard — see every blocked submission with IP, score, and signals</li>
<li>Top Spammers page — aggregate view of worst offenders with one-click blacklisting</li>
<li>IP Blacklist — manually block IPs or CIDR ranges</li>
<li>Test Mode — see live spam scores without blocking anyone</li>
<li>Debug Log — step-by-step validation log for diagnosing issues</li>
<li>Preset modes — Relaxed, Balanced, Strict</li>
<li>Page time protection — configurable minimum time in seconds or milliseconds</li>
<li>Fully adjustable — enable/disable each signal, adjust point values</li>
<li>No tracking, no upsells, no phone-home</li>
</ul>
<h4>Privacy</h4>
MentoGuard reads your local WordPress database only. It logs the IP address and behavioral score of blocked submissions. No data is sent to any external server at any time.
<h4>Usage with Contact Form 7</h4>
Add [mentoguard] inside your CF7 form editor, before the submit button:
[text* your-name] 
[email* your-email] 
[mentoguard] 
[submit “Send”]

MentoGuard: Behavioral Spam Blocker for Contact Forms

GDPR-friendly behavioral spam protection for WordPress forms. No Google. No external servers. Zero page speed impact.

Ali Khallad

carticy

Checkout Shield stops fake checkout orders and card testing attacks — the kind that bypass your CAPTCHA.
Card testing bots don’t fill out your checkout form. They hit your store’s checkout API directly, completely skipping any reCAPTCHA or hCaptcha you’ve set up. That’s why CAPTCHA alone doesn’t stop them.
This plugin verifies that every checkout request comes from a real browser session. Bots that can’t prove they loaded your checkout page get blocked before WooCommerce processes the order.
<h4>Why Store Owners Choose This Plugin</h4>
<ul>
<li>Catches what CAPTCHA misses — blocks bots hitting your checkout API directly</li>
<li>Works with any caching — LiteSpeed, Cloudflare, WP Rocket, W3TC — no conflicts</li>
<li>Zero configuration — activate and you’re protected</li>
<li>No external services — everything runs on your server, no subscriptions</li>
<li>No performance impact — validation adds microseconds, not seconds</li>
</ul>
<h4>Features (Free)</h4>
<ul>
<li>Automatic bot blocking — works the moment you activate, no setup needed</li>
<li>4 protection levels — Learning, Permissive, Balanced, and Strict — choose how aggressive you want to be</li>
<li>Dashboard overview — see blocked vs verified orders at a glance with a 7-day chart</li>
<li>Order status tracking — know which orders were flagged, passed, or blocked</li>
<li>IP whitelist — let trusted addresses through, supports CIDR notation</li>
<li>API key authentication — for headless and custom checkout setups</li>
<li>Works with all checkout types — classic, block-based, and all payment gateways</li>
<li>HPOS compatible — works with High-Performance Order Storage</li>
<li>WooCommerce logging — full integration with WooCommerce Status logs</li>
</ul>
<h4>Pro Features</h4>
Take control with advanced tools:
<ul>
<li>3-level logging control — turn logging off, log blocked attempts only, or log everything</li>
<li>Recent blocks feed — last 50 blocked attempts on your dashboard with email, payment method, and reason</li>
<li>Automatic CDN/proxy detection — identifies real visitor IPs behind Cloudflare, Sucuri, or Akamai</li>
<li>Stronger permissive mode — tighter bot detection with referrer verification</li>
<li>Checkout details in logs — see which email and payment method bots tried to use</li>
<li>Customer blocklist — block repeat offenders by email, name, address, phone, IP, or postal code</li>
<li>One-click order blocking — block a customer directly from any order screen</li>
</ul>
<a href="https://carticy.com/plugins/checkout-shield-for-woocommerce/" rel="nofollow ugc">Learn more about Pro features</a>

Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing

Stops fake checkout orders, card testing attacks, and spam bots that bypass CAPTCHA. Works instantly with all checkout types.

MentoGuard: Behavioral Spam Blocker for Contact Forms vs Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing