LaughterOnWater

<p>Raptcha is an innovative CAPTCHA alternative that challenges users to count animals in a dynamic image, promoting accessibility and user engagement. Unlike text-based CAPTCHAs, it uses engaging visuals (cats, dogs, birds) with randomized placements and scales for enhanced security.</p>
<p>Key features:</p>
<ul>
<li><strong>Animal Counting Challenges</strong>: Randomized images with 1-10 animals, ensuring varied difficulty.</li>
<li><strong>Bot Detection Heuristics</strong>: Advanced checks (drag time, mouse distance, focus duration) to prevent automated submissions.</li>
<li><strong>Form Integrations</strong>: Native support for WordPress comments, login forms, and popular plugins (Contact Form 7, Kadence Forms, Ninja Forms).</li>
<li><strong>Shortcode Integration</strong>: Easily embed with <code>[raptcha]</code> for custom forms.</li>
<li><strong>Fully Secured</strong>: Nonce verification, transients for challenge storage, and sanitization throughout.</li>
</ul>
<p>This plugin prioritizes privacy, security and usability, making it a in-house, private, modern alternative to traditional CAPTCHAs.</p>


Raptcha


It works as advertised. That said I would love 2 extra features to be added:



1. For at least the Comments form, or any form to that matter the Raptcha should not appear for logged in users.



2. We need support for the Log in/out core block when the block is configured to be displayed as a form and not as just a link. It would be great for the themes that use the Log in/out block in their footers. At this point, the Raptcha does not appear and even if you have entered the correct credentials it loads the actual WP login page and you have to go through the login process again.



Great job and thank you for this plugin.


Absolutely a Five Star Plugin !

A secure, animal-based CAPTCHA for WordPress forms featuring intelligent bot detection and multi-form integrations.

Profound

<p>Profound Agent Analytics is a powerful WordPress plugin that integrates with Profound’s edge log analysis service to identify, classify, and provide reporting on bot and human traffic to your website. The plugin works by efficiently collecting and sending request data from public pages to Profound’s analytics platform. Read more <a href="https://docs.tryprofound.com/agent-analytics/wordpress/introduction" rel="nofollow ugc">here</a></p>
<h4>Key Features</h4>
<ul>
<li><strong>Non-blocking Performance</strong>: Uses an asynchronous queue system to ensure zero impact on page load times</li>
<li><strong>Privacy-Focused</strong>: Query parameter redaction to protect sensitive data</li>
<li><strong>Smart Batching</strong>: Efficiently sends logs in batches to minimize network overhead</li>
<li><strong>Circuit Breaker</strong>: Automatic protection against API failures to prevent cascading issues</li>
<li><strong>Flexible Configuration</strong>: Extensive settings for customizing what data is collected and sent</li>
<li><strong>Enterprise Ready</strong>: Supports environment variables and constants for API key configuration</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>The plugin captures essential HTTP request metadata (method, path, status, timing)</li>
<li>Data is immediately queued in a local database table with minimal overhead</li>
<li>A background process sends batched logs to Profound’s API endpoint</li>
<li>Failures are automatically retried with exponential backoff</li>
<li>Your Profound dashboard provides real-time insights into your traffic</li>
</ol>
<h4>Privacy & Security</h4>
<p>Profound Agent Analytics is designed with privacy and security at its core:</p>
<ul>
<li><strong>Complete IP Tracking</strong>: Captures full IP addresses for accurate traffic analysis and reverse DNS lookups (required for bot detection)</li>
<li><strong>Sensitive Data Protection</strong>: Automatically redacts passwords, tokens, and credit card information from query parameters</li>
<li><strong>Public Traffic Only</strong>: Excludes all WordPress admin, REST API, and system paths – only tracks public visitor traffic</li>
<li><strong>Encrypted Storage</strong>: API keys are encrypted using WordPress salts when Sodium extension is available</li>
<li><strong>No Cookie Tracking</strong>: Server-side only – does not use cookies or client-side tracking</li>
</ul>
<h4>Performance Optimized</h4>
<ul>
<li>Adds less than 1ms to request processing time</li>
<li>Efficient database operations with proper indexing</li>
<li>Automatic cleanup of old log entries</li>
<li>Memory-aware batching to prevent large payloads</li>
<li>Configurable queue size limits</li>
</ul>
<h3>Privacy Policy</h3>
<p>This plugin sends data to Profound’s analytics service (https://artemis.api.tryprofound.com). The data sent includes:<br />
– Full IP addresses (required for bot detection and traffic analysis)<br />
– Request URLs from public pages only (admin and system paths are excluded)<br />
– HTTP headers (user agent, referer)<br />
– Response metadata (status code, size, duration)<br />
– Query parameters (with sensitive values redacted)</p>
<p>The plugin only tracks public visitor traffic. WordPress admin activity, user actions, and system operations are not collected. All data is processed in accordance with Profound’s privacy policy available at https://tryprofound.com/privacy-policy</p>
<h3>System Requirements</h3>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.7+ or MariaDB 10.2+</li>
<li>Ability to make outbound HTTPS requests</li>
<li>WP-Cron enabled (or real cron configured)</li>
<li>Sodium PHP extension (recommended for encryption)</li>
</ul>
<h3>Development & Testing</h3>
<p>This plugin includes a <code>.wp-env.json</code> configuration for local testing using <a href="https://developer.wordpress.org/block-editor/reference-guides/packages/packages-env/" rel="nofollow ugc">wp-env</a>. This requires Docker (or OrbStack) and Node.js.</p>
<h4>Running Compatibility Tests</h4>
<ol>
<li>
<p>Start the environment:<br />
npx @wordpress/env start</p>
</li>
<li>
<p>Verify the plugin activates without errors:<br />
npx @wordpress/env run cli wp plugin deactivate agent-analytics-wp-plugin<br />
npx @wordpress/env run cli wp plugin activate agent-analytics-wp-plugin</p>
</li>
<li>
<p>Verify all classes instantiate and core functionality works:<br />
npx @wordpress/env run cli wp eval ‘new AgentAnalytics\Settings(); new AgentAnalytics\Queue(); echo “OK”;’</p>
</li>
<li>
<p>Check for PHP errors, warnings, or deprecation notices (WP_DEBUG is enabled):<br />
npx @wordpress/env run cli cat /var/www/html/wp-content/debug.log<br />
If the file does not exist, there are no errors.</p>
</li>
<li>
<p>Stop the environment:<br />
npx @wordpress/env stop</p>
</li>
</ol>
<p>To test against a different WordPress version, edit the <code>core</code> value in <code>.wp-env.json</code> (e.g. <code>"WordPress/WordPress#7.0"</code>) and restart.</p>
<h4>Deploying to WordPress.org</h4>
<p>See <code>DEPLOY.md</code> for instructions on publishing releases and updating the “Tested up to” value via SVN.</p>
<h3>Support</h3>
<p>For support, please contact support@tryprofound.com</p>


Profound Agent Analytics

Profound Agent Analytics sends lightweight HTTP request logs to Profound's analytics platform for advanced bot detection and traffic analysis.

Raptcha vs Profound Agent Analytics