Bot protection for WordPress in five simple modes. Every visitor is sorted into Humans, Suspicious, or Bots by the PureGuard 18-layer engine — then your mode decides: monitor, block bots, challenge the uncertain, allow humans only, or lock the whole site down. Branded challenge & block pages, a censorship-friendly VPN filter, and a live Security/Performance dashboard built in.
Download Free Plugin Get it on WordPress.orgPureGuard Performance sits between your traffic source and your landing page. It runs two independent detection phases before any visitor interacts with your content.
18+ detection layers execute before WordPress loads. IP reputation (FireHOL + CrowdSec), bot UA signatures, datacenter ASN detection, Chrome version analysis, Sec-Fetch header validation, burst rate limiting, and more. Bots are blocked in under 5ms — they never see your page.
10 client-side integrity checks run in the real browser: Canvas fingerprint, WebGL renderer, AudioContext hash, math precision, hardware concurrency, timezone consistency, touch API presence, devtools detection, headless browser flags, and runtime injection checks.
Filtered-tier visitors are served a lightweight verification page with SHA-256 proof-of-work + 10 browser integrity checks. Real browsers solve it in 1-3 seconds. Bots and headless browsers fail. Passed visitors get an HMAC-signed cookie valid for 1 hour.
Off (monitor only), Medium (block confirmed bots), High (block bots + challenge suspicious), Strict (humans only), and Lockdown (emergency block-everyone — admins and search engines always excepted). One radio button, no unsafe combinations.
Audience behind censorship browsing via VPN? One toggle and visitors flagged only for VPN / proxy / hosting-network signals are never hard-blocked — they get the quick browser check instead. Humans pass in seconds; bots cannot. Real bot evidence still blocks.
Your logo, brand name, accent color, and dark/light theme on both the challenge and block pages. Blocked visitors see their IP, an incident ID, and an "I am human" report button — reports land on your dashboard. One-click previews before anything goes live.
Real-time engagement beacons fire at 10s, 30s, and 60s intervals. Scroll depth percentage, click events, and time-on-page are tracked and reported to your PureGuard dashboard. Prove your traffic quality with hard data.
The server-side WAF runs before WordPress boots — blocked bots consume zero PHP resources. The client-side script loads with defer attribute, never blocking page render. Your Core Web Vitals stay clean.
All data flows to your PureGuard dashboard in real time. See tier breakdowns in Zone Quality, watch engagement metrics in Live Traffic, and track per-zone performance. WordPress admin shows a summary widget.
Traffic passes through two independent detection phases before reaching your content.
Visitor clicks your ad and lands on your WordPress site via PureGuard click URL
18+ detection layers run before WordPress loads. Bots blocked in <5ms. Zero page resources consumed.
10 integrity checks confirm the visitor is a real browser, not a headless bot or emulator.
Visitor is classified as Human, Suspicious, or Bot — your security mode decides who passes, who is challenged, and who sees the block page.
Every visitor gets one of three classifications; the security mode you pick decides what happens to each.
Trust score at or above your human line (default 5.5). Real device, real browser, clean network, consistent headers. Always allowed in every mode except Lockdown.
Not clearly human, not clearly bot. Passes in Medium, must solve the quick browser check (SHA-256 proof-of-work + 10 integrity checks, 1–3 seconds for real people) in High, and is blocked in Strict.
Confirmed by hard evidence: bot user-agents, IP blocklists, headless signatures, burst patterns, impossible browser fingerprints. Blocked in every enforcing mode — shown your branded block page or sent to a dump URL you choose.
Get up and running in under 2 minutes. No coding required.
Click the download button above to get the ZIP file. No account required to download.
In WordPress, go to Plugins → Add New → Upload Plugin. Select the ZIP file and click Install Now.
Activate the plugin, then navigate to Settings → PureGuard in your WordPress admin panel.
Enter your PureGuard workspace key (available in your account settings) and save. Protection starts immediately.
Built for performance-critical media buying environments.
These checks run before WordPress loads. Bots never consume your server resources.
Yes. The plugin connects to your PureGuard workspace via an API key. Create a free account to get your workspace key. The Starter plan includes 100,000 checks per month at no cost.
No. The server-side WAF blocks bots before WordPress loads, so blocked traffic consumes zero PHP resources. The client-side script uses defer loading — it never blocks page render. Your Core Web Vitals are unaffected.
No. The plugin only activates on pages loaded with PureGuard tracking parameters (pg_z and pg_src). Organic visitors from Google, social media, or direct links are completely unaffected. Search engine crawlers are never blocked.
No — turn on the censorship-friendly filter. Visitors flagged only for VPN / proxy / hosting-network signals are never hard-blocked; at most they see a quick automatic browser check that real people pass in seconds. Built for audiences in censored countries.
Yes — the PureGuard Live dashboard inside wp-admin shows a Security view (hourly charts, visitor mix, top blocked IPs, countries, reasons, live feed) and a Performance view (API latency, cache efficiency, blocked page-loads saved), powered by a local 30-day event log in your own database.
Any traffic source that can send visitors through a PureGuard click URL. This includes PopAds, RollerAds, HilltopAds, PropellerAds, ExoClick, ClickAdilla (including RTB), and any source that supports redirect tracking.
Yes. Install the plugin on as many sites as you need. Each site connects to the same PureGuard workspace key. All traffic data is aggregated in your dashboard.
Download the plugin, install in 2 minutes, and see your first traffic quality report within the hour.
Download Plugin Create Free Account