LaughterOnWater

Raptcha is an innovative CAPTCHA alternative that challenges users to count animals in a dynamic image, promoting accessibility and user engagement. Unlike text-based CAPTCHAs, it uses engaging visuals (cats, dogs, birds) with randomized placements and scales for enhanced security.
Key features:
<ul>
<li>Animal Counting Challenges: Randomized images with 1-10 animals, ensuring varied difficulty.</li>
<li>Bot Detection Heuristics: Advanced checks (drag time, mouse distance, focus duration) to prevent automated submissions.</li>
<li>Form Integrations: Native support for WordPress comments, login forms, and popular plugins (Contact Form 7, Kadence Forms, Ninja Forms).</li>
<li>Shortcode Integration: Easily embed with <code>[raptcha]</code> for custom forms.</li>
<li>Fully Secured: Nonce verification, transients for challenge storage, and sanitization throughout.</li>
</ul>
This plugin prioritizes privacy, security and usability, making it a in-house, private, modern alternative to traditional CAPTCHAs.

Raptcha


It works as advertised. That said I would love 2 extra features to be added:



1. For at least the Comments form, or any form to that matter the Raptcha should not appear for logged in users.



2. We need support for the Log in/out core block when the block is configured to be displayed as a form and not as just a link. It would be great for the themes that use the Log in/out block in their footers. At this point, the Raptcha does not appear and even if you have entered the correct credentials it loads the actual WP login page and you have to go through the login process again.



Great job and thank you for this plugin.


Absolutely a Five Star Plugin !

A secure, animal-based CAPTCHA for WordPress forms featuring intelligent bot detection and multi-form integrations.

unsourcedapp

AI assistants now answer the questions your readers used to type into Google, often using your content. Are they citing you, or sending people to a competitor? Unsourced is the WordPress plugin for <a href="https://unsourced.app" rel="nofollow ugc">Unsourced</a>, the evidence layer for AI search, also known as GEO (generative engine optimization), AEO (answer engine optimization), or AI SEO.
Unsourced shows independent publishers and content creators which AI assistants cite them, who is really crawling their site, and whether their fixes actually move the needle, backed by verified evidence, not the inferred “AI visibility scores” most tools sell.
Server-side bot detection: catches the bots that skip JavaScript
Most analytics tools are blind to AI crawlers because bots like GPTBot and ClaudeBot never execute JavaScript. This plugin runs inside WordPress at the PHP level, checks every request against 22 known AI bot signatures, and logs each visit to your Unsourced dashboard with zero impact on page load time. The server-side layer is what actually catches AI crawlers, and the plugin adds no JavaScript to your pages.
Bot Trust: verified, impostor, or unverifiable
Anyone can put “GPTBot” in a User-Agent string. Unsourced verifies each crawler’s true identity against the operator’s published IP ranges and forward-confirmed reverse DNS (FCrDNS), then sorts every visitor into Verified, Impostor, or Unverifiable, with honest, copy-paste block rules. You see who is genuinely OpenAI or Anthropic, and who is just wearing the badge.
AI citation monitoring: are they citing you or a competitor?
Beyond crawl detection, Unsourced runs weekly citation checks across 7 AI models, including ChatGPT, Claude, Gemini, Grok and Perplexity. It generates high-intent questions tailored to your actual content topics (the same kind of questions your audience types into AI assistants), then checks whether the AI cites your domain or sends users to a competitor instead.
Every check is logged: which AI platform, which prompt, whether you were cited, what context surrounded the mention, and which competitor domains appeared instead. You get a clear picture of your AI search presence across all 7 models Unsourced monitors.
Origin Signal: live crawl or training data?
When an AI assistant’s answer reproduces your wording, Unsourced checks whether a verified AI crawler (caught by this plugin’s server-side detection) actually fetched that page in the same window. If it did, the citation is backed by a live crawl rather than older training data. Each match is logged with a timestamp and the scan window it belongs to.
Combined with your bot-visit logs and citation results, that gives you a documented, timestamped record of live use of your content, a starting point for licensing conversations or escalation.
Measured lift: did your fix actually work?
When Unsourced flags a gap (a topic where AI recommends a competitor instead of you) and you act on it, you can mark it actioned. Unsourced then re-checks that exact topic about a week later and tells you whether your citations actually moved: measured evidence of a change, not a promise. No causation is overclaimed; you simply see the before and after.
What you see in your dashboard:
<ul>
<li>Which AI bots visited, which pages, and how often, and which are Verified, Impostor, or Unverifiable</li>
<li>Your citation rate across all 7 AI models: ChatGPT, ChatGPT (web search), Claude, Gemini (grounded search), Grok, Meta Llama and Perplexity</li>
<li>Which competitor domains are cited instead of you, and for which topics</li>
<li>Whether each citation came from a live crawl of your page or from older training data</li>
<li>Whether a fix you actioned produced measured lift on its topic</li>
<li>Weekly AI Visibility Audit and Evidence Report PDFs, generated from your live data</li>
</ul>
Detected bots (22 signatures): 
* GPTBot, ChatGPT-User & OAI-SearchBot (OpenAI) 
* ClaudeBot & anthropic-ai (Anthropic) 
* PerplexityBot & Perplexity-User 
* CCBot (Common Crawl) 
* Google-Extended, GoogleOther, Google-CloudVertexBot 
* Bytespider (ByteDance / TikTok) 
* cohere-ai, Diffbot, Amazonbot, YouBot 
* Meta-ExternalAgent 
* Applebot-Extended 
* omgilibot, PetalBot, Timpibot, BrightBot
<h3>External Services</h3>
This plugin sends data to Unsourced (https://unsourced.app), an external service that logs and displays AI bot activity and citation intelligence for your site. A connection to this service is required for the plugin to function.
What data is transmitted:
<ul>
<li>Your site URL</li>
<li>The URL of the page being visited by the bot</li>
<li>The detected bot name and raw User-Agent string</li>
<li>The visitor IP address</li>
</ul>
When data is sent:
Only when a valid Unsourced API key has been configured in the plugin settings. Bot event reporting fires only when a request matches a known AI bot signature, sending the details above. The plugin also contacts Unsourced when you connect and verify your account, sending your site URL and API key. Human visitors are not affected by bot reporting.
Service links:
<ul>
<li>Website: https://unsourced.app</li>
<li>Terms of Service: https://unsourced.app/terms</li>
<li>Privacy Policy: https://unsourced.app/privacy</li>
</ul>

Unsourced – AI Bot Monitor & AI Search Citation Tracker

See which AI assistants cite your site, who is really crawling it, and whether your fixes work, backed by verified evidence, not vanity scores.

Raptcha vs Unsourced – AI Bot Monitor & AI Search Citation Tracker