hammadtq

OpenBotAuth helps publishers control automated access from AI crawlers and agents. It verifies requests using RFC 9421 HTTP Message Signatures (via a configurable verifier) and applies per-site or per-post policies like allow, deny, teaser previews, and 402 payment-required responses. It also publishes AI-friendly endpoints like llms.txt, a JSON feed, and per-post Markdown.
Instead of blocking all bots or allowing unrestricted access, you can:
<ul>
<li>See AI bot traffic – Local-only analytics showing which bots are crawling your site</li>
<li>Verify bot identity using cryptographic signatures (RFC 9421)</li>
<li>Show teasers to unverified bots (first N words)</li>
<li>Rate limit bot access per agent</li>
<li>Whitelist/blacklist specific bots</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Bot Traffic Analytics – See which AI bots (GPTBot, ClaudeBot, PerplexityBot, etc.) are visiting your site</li>
<li>Signature Verification – Verifies RFC 9421 HTTP Message Signatures using Ed25519 cryptography</li>
<li>Content Teasers – Show first N words to unverified bots with customizable per-post settings</li>
<li>Rate Limiting – Per-agent rate limits with configurable time windows</li>
<li>Access Control – Whitelist/blacklist with wildcard pattern matching</li>
<li>Local Analytics – Visual dashboard with charts, stats cards, and decision breakdowns (no external tracking)</li>
<li>AI-Ready Endpoints – Serve llms.txt, JSON feed, and markdown for AI crawlers</li>
<li>Tabbed Admin Interface – Clean organization with Analytics, AI Endpoints, and Configuration tabs</li>
</ul>
<h4>AI-Ready Endpoints</h4>
OpenBotAuth provides machine-readable endpoints for AI systems:
<ul>
<li>/llms.txt – Standardized AI feed discovery (also at /.well-known/llms.txt)</li>
<li>/.well-known/openbotauth-feed.json – JSON list of all published posts</li>
<li>/.well-known/openbotauth/posts/{ID}.md – Per-post markdown content</li>
</ul>
Configure which post types to include (posts, pages, or custom types) and set the feed limit (up to 500 items). All data is served locally from your WordPress database. No external tracking or telemetry. Only published, non-password-protected posts are exposed.
<h4>How It Works</h4>
<ol>
<li>AI agent signs HTTP request with its private key (RFC 9421 signature)</li>
<li>WordPress plugin extracts signature headers and sends them to a verifier service</li>
<li>Verifier fetches agent’s public key from registry and verifies signature</li>
<li>Plugin applies policy: allow full content, show teaser, require payment, or deny</li>
</ol>
<h4>External Service Disclosure</h4>
This plugin connects to an external verifier service. When a signed bot request is received, the plugin sends the following data to your configured verifier URL via <code>wp_remote_post</code>:
<ul>
<li>HTTP method (GET, POST, etc.)</li>
<li>The accessed URL (including query string, if present)</li>
<li>HTTP signature headers (Signature, Signature-Input, Signature-Agent)</li>
<li>Additional HTTP header values explicitly listed in the Signature-Input header (e.g., content-type, accept, user-agent)</li>
</ul>
Privacy protection: Sensitive headers (cookies, authorization, proxy-authorization, www-authenticate) are NEVER forwarded, even if present in the request. If a bot’s signature covers a sensitive header, verification will fail with a clear error.
No WordPress user accounts or personal data is transmitted. Only the headers explicitly covered by the bot’s signature are forwarded to enable cryptographic verification. Note that the URL may include query parameters depending on your site’s structure.
You can: 
* Use the hosted verifier at <code>https://verifier.openbotauth.org/verify</code> 
* Self-host the verifier service (see documentation) 
* The verifier service may log requests server-side depending on your configuration
Analytics are local-only. Decision counts (allow/teaser/deny/pay/rate_limit) and bot traffic observations (User-Agent based) are stored in your WordPress database. No analytics data is sent to external servers.
For more information, please review our <a href="https://openbotauth.org/terms" rel="nofollow ugc">Terms of Service</a> and <a href="https://openbotauth.org/privacy" rel="nofollow ugc">Privacy Policy</a>.
<h3>Developer Hooks</h3>
<h4>Filters</h4>
openbotauth_policy 
Modify policy before applying:
<pre><code>add_filter('openbotauth_policy', function($policy, $post) {
 if ($post->post_type === 'premium') {
 $policy['price_cents'] = 1000;
 }
 return $policy;
}, 10, 2);
</code></pre>
<h4>Actions</h4>
openbotauth_verified 
Triggered when a bot is verified:
<pre><code>add_action('openbotauth_verified', function($agent, $post) {
 error_log("Bot {$agent['jwks_url']} accessed post {$post->ID}");
}, 10, 2);
</code></pre>
openbotauth_payment_required 
Triggered when 402 is returned:
<pre><code>add_action('openbotauth_payment_required', function($agent, $post, $price) {
 // Track payment requests
}, 10, 3);
</code></pre>
<h4>AI Endpoint Filters (v0.1.2+)</h4>
openbotauth_should_serve_llms_txt 
Disable llms.txt endpoint (e.g., when using Yoast):
<pre><code>add_filter('openbotauth_should_serve_llms_txt', '__return_false');
</code></pre>
openbotauth_should_serve_feed 
Disable JSON feed endpoint:
<pre><code>add_filter('openbotauth_should_serve_feed', '__return_false');
</code></pre>
openbotauth_should_serve_markdown 
Disable markdown endpoints:
<pre><code>add_filter('openbotauth_should_serve_markdown', '__return_false');
</code></pre>
openbotauth_feed_item 
Modify feed items:
<pre><code>add_filter('openbotauth_feed_item', function($item, $post) {
 $item['custom_field'] = get_post_meta($post->ID, 'my_field', true);
 return $item;
}, 10, 2);
</code></pre>
openbotauth_markdown_content 
Post-process markdown output:
<pre><code>add_filter('openbotauth_markdown_content', function($markdown, $post) {
 return $markdown . "\n\n---\nCopyright notice here";
}, 10, 2);
</code></pre>

OpenBotAuth – AI Crawler Access Control

Verify AI crawlers with HTTP Signatures and enforce allow/deny/teaser policies; also serves llms.txt and AI-ready feeds.

Bill Minozzi

Anti Bots 
★★★★★
<h3>Effortless bot protection for WordPress. Set up in minutes, secure your site with just a few clicks!</h3>
<h3>🚀 In a Hurry? Block Bad Bots Instantly!</h3>
What it does: 
It’s a powerful bot firewall that automatically blocks malicious bots while allowing legitimate traffic. This plugin protects your site from data theft, server overload, and SEO damage caused by unwanted automated traffic.
Why it matters: 
WordPress sites are constantly targeted by malicious bots. Your site’s bot protection isn’t optional—it’s essential for survival. 
According to Cloudflare, 2.5% of ALL internet traffic is malicious bots—nearly 2 million attacks every second. These bots steal content, overload servers, and can destroy your SEO rankings overnight.
Key Protections: 
* Automatic Bad Bot Blocking: Instantly blocks malicious bots and scrapers 
* Smart Whitelisting: Pre-configured with 20+ trusted bots (Google, Bing, social networks) 
* Brute Force Prevention: Stops bots from attacking your login forms 
* Server Load Reduction: Prevents bot-induced slowdowns and crashes 
* Zero performance impact → No DNS changes, no cloud redirects, no speed penalty
Essential Features: 
* One-Click Setup: Fully operational in less than 2 minutes 
* Learning Mode: Test safely without blocking good traffic 
* Visitor Logging: See exactly who’s accessing your site 
* Spam Prevention: Blocks bots from submitting forms and comments 
* Independent Operation: Works without Fail2ban or server modifications
<h3>🔎 Want to Understand the Full Bot Threat? Continue Reading Below</h3>
Bad Bots: A Growing Danger
<blockquote>
Can you imagine the sheer volume of data crossing the internet every second? It’s truly monstrous, isn’t it? Millions of interactions, searches, and transactions… 
 Well, brace yourself for a staggering statistic: according to Cloudflare, the online security giant, about one-third (approximately 30-33%) of all this global traffic is generated by bots – that is, by computer programs, not humans. 
 And even more alarming: from this immense volume of bot traffic, Cloudflare identified that 8.6% have malicious purposes (Q1 2024 data). This means that approximately 2.5% of ALL internet traffic consists of malicious bots constantly active, searching for loopholes, stealing data, or trying to take down sites! That’s nearly 2 million attacks every second sweeping across the web. ** 
 But the news doesn’t stop there: this **malicious bot activity is constantly evolving and increasing. A key reason for this alarming trend is that: Artificial Intelligence (AI) is empowering even less-skilled attackers to create bots to steal information, while ready-made attack kits are sold on the dark web, amplifying both the volume and sophistication of threats. 
 Furthermore, the emergence of many new Artificial Intelligence websites means they now deploy their own bots for web crawling and data gathering, contributing significantly to overall bot traffic.
Bots can have a negative impact on your website in a number of ways. They can overload your server, which can cause performance problems such as slowness and longer response times. They can also look for vulnerabilities in your website and steal your content, which can damage your SEO.
</blockquote>
The Anti-Bot Plugin introduces an innovative approach to bot management and WordPress security. By default, it blocks all bots except those from Google and Microsoft Bing. You can also create a bot whitelist of approved bots, ensuring that only those you trust can access your site. The plugin includes a pre-configured list of approximately 20 reputable bots from major social networks, including Google and Microsoft. With our advanced learning mode, you can test the plugin and manage this list—adding or removing bots—without risking the blocking of beneficial ones. Additionally, the plugin features a visitor log to help you oversee this process.
<ul>
<li>stop bad bots</li>
<li>protect website from bots</li>
<li>website performance optimization</li>
</ul>
<h3>Key Features:</h3>
<ul>
<li>User-Friendly: Simple installation and setup with just 3-4 clicks.</li>
<li>Comprehensive Bot Protection: Effectively blocks unwanted bots, scrapers, and botnets while allowing trusted ones. Protects your website from bots and helps prevent bot attacks.</li>
<li>Customizable Whitelist: Comes with a pre-configured list of approximately 20 good bots from major social networks, including Google and Microsoft. Manage this list by adding or removing bots as needed.</li>
<li>Learning Mode: Test the plugin and build your whitelist without disrupting your site.</li>
<li>Prevents Bots from Spamming Comments and Contact Forms: Acts as a spam bot blocker.</li>
<li>Protect Your SEO: Prevents bots from stealing your content and negatively impacting your SEO.</li>
<li>Prevents Bots from Overloading Your Server: Mitigates performance degradation caused by bots, ensuring fast and seamless navigation for visitors. Site performance enhancement and helps increase website speed.</li>
<li>Brute Force Protection: Shields your login form from brute force attack protection.</li>
<li>Performance Friendly: No effect on site speed, no DNS or Cloud Traffic Redirection, and no risk of Google penalties for slow sites. Provides website security plugin and automated bot defense.</li>
<li>This plugin operates independently and does not require Fail2ban (Fail to Ban) to be installed on your server.</li>
</ul>
Translation ready. Files included: Dutch, English, French, Italian, Portuguese, Spanish, and German.
For enhanced protection, consider our free <a href="https://wordpress.org/plugins/StopBadBots/" rel="ugc">StopBadBots</a> plugin, which offers additional features to tackle more sophisticated threats. Please note that this option may require a slightly longer installation time due to its advanced capabilities and is designed for experienced users. 
Also need to protect your forms? 
<a href="https://wordpress.org/plugins/recaptcha-for-all/" rel="ugc">Install our Free Recaptcha & Cloudflare Turnstile plugin.</a>
Please check out our demo video and documentation at: 
<a href="https://antibotsplugin.com/help/" rel="nofollow ugc">Online Guide</a> 
<a href="https://antibotsplugin.com/demo-video/" rel="nofollow ugc">Demo Video</a>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/JmVR6BlEnaQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<a href="https://antibotsplugin.com/" rel="nofollow ugc">Plugin Site</a> 
<a href="https://antihackerplugin.com/" rel="nofollow ugc">Compatible With Anti Hacker Plugin</a>
<h3>CREDITS AND SOURCE FILES</h3>
We use Datatables to render our visitors table. 
You can find the complete files (no minimized) to download 
on this link: 
https://datatables.net/download/index 
Same thing for Bootstrap: 
https://getbootstrap.com/docs/4.3/getting-started/download/ 
Same thing for jQuery: 
https://jquery.com/download/
<h3>External service (1)</h3>
When using our chat, only some information about issues, such as your language and data from the Diagnose tab, may be sent to our server. We do not share, publish, or disclose any information with third parties. 
domain: https://BillMinozzi.com/chat/api/api.php
<h3>External service (2)</h3>
The plugin will retrieve tips and news from our site BillMinozzi.com. This information will be displayed in the plugin dashboard, in the right-hand column under the title “Tips and News.” No data is sent to our server. 
domain: https://billminozzi.com/API/bill-api.php
<h3>Advanced Site Health</h3>
WordPresss built-in Site Health feature provides a great baseline for your sites well-being. However, in todays digital landscape, true health goes beyond server configuration. A site can have a perfect score and still be slow, vulnerable, or plagued by critical errors.
Our plugin extends the core Site Health concept to provide a truly holistic analysis of what keeps your site fast, stable, and secure. We dont just check the basics; we diagnose critical issues that directly impact your visitors experience and your sites operational integrity.
Our enhanced checks include:Performance & Memory Analysis, Proactive Error Detection, Modern Security Monitoring. 
That involves querying public, authoritative services like rdap.db.ripe.net with visitor IP addresses for security analysis. 
domain: https://rdap.db.ripe.net/ip/
For a complete overview of all features, our data handling practices, and the full terms governing our software, please visit our official website: 
https://siterightaway.net/terms-of-use-of-our-plugins-and-themes/

Stop and Block bots plugin Anti-bots

Real-Time Bot Protection. Anti Bots (robots), crawlers and spiders also from botnets. Increase security and avoid server overload and bandwidth.

OpenBotAuth – AI Crawler Access Control vs Stop and Block bots plugin Anti-bots