wpsqr

<p><strong>Puzzle Gate</strong> is a next-generation WordPress security plugin that replaces annoying traditional CAPTCHAs with an <strong>intelligent, interactive puzzle system</strong>. Unlike conventional image/text CAPTCHAs that rely on external services and frustrate users, Puzzle Gate offers a fast, self-hosted solution that’s both highly secure and surprisingly user-friendly.</p>
<h3><strong>Why Website Owners Choose Puzzle Gate:</strong></h3>
<p><strong>Blocks Automated Login Attacks</strong> – Advanced puzzle logic stops bots before they can even attempt authentication<br />
   <strong>Zero External Dependencies</strong> – No Google services, no tracking, complete privacy compliance<br />
   <strong>Lightning Fast</strong> – Adds just 200ms to your login page load time<br />
   <strong>Mobile-First Design</strong> – Works perfectly on all devices without compromising security<br />
   <strong>GDPR/Privacy Compliant</strong> – No external API calls, no user data sharing<br />
   <strong>Accessibility Focused</strong> – Screen reader compatible with alternative input methods</p>
<h3><strong>How It Works (The Smart Way):</strong></h3>
<ol>
<li><strong>Interactive Puzzle Challenge</strong> – Users arrange randomized symbols into logical order</li>
<li><strong>Server-Side Validation</strong> – Each puzzle is uniquely generated and hashed for maximum security</li>
<li><strong>Automatic Bot Blocking</strong> – Failed attempts trigger puzzle regeneration</li>
<li><strong>Seamless Login Experience</strong> – Humans solve it in seconds, bots can’t crack it</li>
</ol>
<p>Puzzle data is generated server-side, hashed securely, and expires automatically to prevent replay attacks.</p>
<h3><strong>Features</strong></h3>
<h3>Core Security</h3>
<ul>
<li>Drag-and-drop puzzle CAPTCHA system</li>
<li>Server-side validation with WordPress salts</li>
<li>Automatic puzzle expiration (configurable)</li>
<li>Brute-force attack protection</li>
<li>Nonce-based replay attack prevention</li>
</ul>
<h3>Administration & Control</h3>
<ul>
<li>Simple settings panel in WordPress admin</li>
<li>Adjustable puzzle difficulty (4-12 symbols)</li>
<li>IP whitelisting capabilities</li>
<li>Failed attempt threshold configuration</li>
</ul>
<h3>User Experience</h3>
<ul>
<li>Fully responsive design</li>
<li>Mobile-optimized interface</li>
<li>Keyboard navigation support</li>
<li>Screen reader compatibility</li>
<li>Visual feedback for interactions</li>
</ul>
<h3>Technical Excellence</h3>
<ul>
<li>100% self-hosted solution</li>
<li>No external API dependencies</li>
<li>Lightweight codebase</li>
<li>Regular security updates</li>
<li>Compatible with most security plugins</li>
</ul>
<h3>Admin Configuration</h3>
<p>Puzzle Gate includes a settings page where administrators can:</p>
<ul>
<li>Enable or disable the puzzle CAPTCHA</li>
<li>Set puzzle difficulty (number of symbols)</li>
<li>Enable the puzzle only after X failed login attempts</li>
<li>Whitelist trusted IP addresses</li>
</ul>
<h3>Documentation</h3>
<p>Full documentation is available on our website:<br />
<a href="https://www.sigmasqr.com/" rel="nofollow ugc">Puzzle Gate Documentation</a></p>
<h3>Troubleshooting</h3>
<ol>
<li>Ensure the Puzzle Gate plugin is activated and your WordPress version is at least 5.2.</li>
<li>Deactivate other plugins to check for conflicts.</li>
</ol>


Puzzle Gate – Login Security with Smart Puzzle CAPTCHA

Stop bots in their tracks with a human-friendly puzzle CAPTCHA for WordPress logins.

Ion Burdianov

mazhurin

eQualitie

<p>Baskerville is a comprehensive WordPress security plugin that protects your site from malicious bots, AI crawlers, and unwanted traffic using multiple detection methods.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li><strong>AI Bot Detection</strong> – Intelligent classification of bots vs. humans with configurable score thresholds</li>
<li><strong>GeoIP Access Control</strong> – Block or allow traffic by country (whitelist/blacklist modes)</li>
<li><strong>Cloudflare Turnstile</strong> – CAPTCHA challenge for borderline bot scores with precision analytics</li>
<li><strong>Browser Fingerprinting</strong> – Advanced client-side fingerprinting (Canvas, WebGL, Audio)</li>
<li><strong>Honeypot Detection</strong> – Hidden links to catch AI crawlers</li>
<li><strong>Real-Time Analytics</strong> – Live feed, traffic statistics, and Turnstile precision metrics</li>
<li><strong>Under Attack Mode</strong> – Emergency mode to challenge all visitors during attacks</li>
<li><strong>IP Whitelist</strong> – Bypass firewall for trusted IPs</li>
<li><strong>Form Protection</strong> – Protect login, registration, and comment forms with Turnstile</li>
</ul>
<p><strong>Bot Score System:</strong></p>
<ul>
<li>0-39: Likely human (allowed)</li>
<li>40-70: Borderline (optional Turnstile challenge)</li>
<li>71-100: Likely bot (blocked)</li>
</ul>
<p><strong>Performance:</strong></p>
<ul>
<li>Minimal overhead (~1ms with page cache, ~30-50ms without)</li>
<li>APCu + file-based caching for GeoIP lookups</li>
<li>Compatible with all major caching plugins</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to the following third-party services:</p>
<h4>Cloudflare Turnstile</h4>
<p>When Turnstile is enabled, the plugin loads JavaScript from Cloudflare’s servers to display CAPTCHA challenges:</p>
<ul>
<li>Service URL: https://challenges.cloudflare.com/turnstile/v0/api.js</li>
<li>Verification API: https://challenges.cloudflare.com/turnstile/v0/siteverify</li>
<li>Data sent: Turnstile token, visitor IP address</li>
<li>Purpose: Human verification to prevent bot access</li>
<li>Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
<li>Terms of Service: https://www.cloudflare.com/website-terms/</li>
</ul>
<p>Turnstile is only loaded when you enable it in plugin settings and provide your Cloudflare API keys.</p>
<h4>MaxMind GeoIP Database</h4>
<p>When you use the one-click GeoIP database installer, the plugin downloads the GeoLite2-Country database from MaxMind:</p>
<ul>
<li>Database download URL: https://download.maxmind.com/</li>
<li>Data sent: Your MaxMind license key (required for database download)</li>
<li>Purpose: Determine visitor country for geo-blocking features</li>
<li>Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
<li>Terms of Service: https://www.maxmind.com/en/geolite2/eula</li>
</ul>
<p>The installer also downloads the MaxMind PHP libraries from GitHub:</p>
<ul>
<li>GeoIP2 PHP API: https://github.com/maxmind/GeoIP2-php/archive/refs/tags/v2.13.0.zip</li>
<li>MaxMind DB Reader: https://github.com/maxmind/MaxMind-DB-Reader-php/archive/refs/tags/v1.11.1.zip</li>
<li>These are open-source libraries used to read the local GeoIP database. No visitor data is sent to GitHub.</li>
<li>GitHub Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service</li>
<li>GitHub Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement</li>
</ul>
<p>The database is stored locally on your server. No visitor data is sent to MaxMind during lookups.</p>
<h3>Privacy</h3>
<h4>Data Collected</h4>
<p>This plugin collects and stores the following visitor data locally in your WordPress database:</p>
<ul>
<li>IP addresses</li>
<li>Browser fingerprints (Canvas, WebGL, Audio hashes)</li>
<li>User agent strings</li>
<li>Country codes (derived from IP)</li>
<li>Bot scores and classifications</li>
<li>Timestamps of visits</li>
</ul>
<h4>Data Retention</h4>
<p>Statistics are automatically deleted after the retention period you configure (default: 14 days). You can adjust this in Settings > Baskerville > Settings.</p>
<h4>GDPR Compliance</h4>
<ul>
<li>All data is stored locally on your server</li>
<li>No visitor data is shared with third parties (except Cloudflare when Turnstile verification occurs)</li>
<li>Data retention is configurable</li>
<li>Consider adding disclosure to your site’s privacy policy</li>
</ul>


Baskerville AI Security

Advanced WordPress security plugin with AI bot detection, GeoIP access control, and Cloudflare Turnstile integration.

Puzzle Gate – Login Security with Smart Puzzle CAPTCHA vs Baskerville AI Security