Title: BotBlocker Security – Complete security platform
Author: Yevhen Leonidov
Published: <strong>2 de noviembre, 2025</strong>
Last modified: 31 de agosto, 2026

---

Search plugins

![](https://ps.w.org/botblocker-security/assets/banner-772x250.png?rev=3405280)

![](https://ps.w.org/botblocker-security/assets/icon-256x256.png?rev=3405280)

# BotBlocker Security – Complete security platform

 By [Yevhen Leonidov](https://profiles.wordpress.org/globusstudio/)

[Download](https://downloads.wordpress.org/plugin/botblocker-security.1.7.5.zip)

 * [Details](https://pe.wordpress.org/plugins/botblocker-security/#description)
 * [Reviews](https://pe.wordpress.org/plugins/botblocker-security/#reviews)
 *  [Installation](https://pe.wordpress.org/plugins/botblocker-security/#installation)
 * [Development](https://pe.wordpress.org/plugins/botblocker-security/#developers)

 [Support](https://wordpress.org/support/plugin/botblocker-security/)

## Description

**BotBlocker Security is a complete security platform that blocks 99% of attacks
before WordPress loads.** Firewall, bot detection, rate limiting, CAPTCHA, 2FA, 
analytics, notifications, tools – one plugin replaces your entire security stack:
no need for separate firewall, CAPTCHA, 2FA, and anti-spam plugins. No bloat, no
monthly fees for core protection.

If your site is hit by login brute force, spam comments, fake Googlebots, content
scrapers, or XML-RPC floods, you are not alone: bots generate over 47% of all web
traffic. Most security plugins react after WordPress boots, wasting CPU and memory
on every bad request. **BotBlocker stops them at the door – then gives you the analytics,
alerts, and tools to understand exactly what it blocked and why.**

Because BotBlocker intercepts traffic before themes and plugins run, it also shields
vulnerabilities in your entire plugin and theme stack. Zero-days in contact form
plugins, unpatched slider code, outdated e-commerce extensions – attackers never
reach the vulnerable code. **BotBlocker is your first and last line of defense, 
every day.**

#### Why site owners switch to BotBlocker

 * **Faster than the competition.** Runs on early init through three interception
   layers, before themes and plugins load. Server load drops during attacks instead
   of spiking. Zero database queries for returning visitors – 11 pre-generated PHP
   files with SHA-256 integrity, loaded via native `include`.
 * **One plugin, full security stack.** Firewall, CAPTCHA, 2FA, anti-spam, rate 
   limiting, bot detection – BotBlocker covers virtually every security need a WordPress
   site has. Most users uninstall 2-3 separate plugins after switching. PRO adds
   malware scanning, security headers, speed optimization, and behavioral analysis–
   still one plugin.
 * **Smarter bot detection.** 2,899 User-Agent signatures – largest blacklist among
   WordPress plugins – plus 2,800+ additional bot signatures. 13 header checks including
   AdBlock detection, incognito mode detection, Canvas/WebGL fingerprinting, and
   device API verification. Anti-detect scoring with 9 weighted signals catches 
   headless Chrome, Puppeteer, Selenium, and PhantomJS even when they spoof user-
   agent strings.
 * **Smarter CAPTCHA.** 9 modes including Silent Auto-Verify – zero clicks for humans,
   hard wall for bots. Proprietary CAPTCHAs defeat AI-based solvers that crack reCAPTCHA
   for $2-3 per 1,000.
 * **Honest free version.** Full firewall, all 9 CAPTCHA modes, full 2FA, full logging,
   full Multisite, Redis/Memcached, shortcodes, command palette, Telegram alerts,
   visual analytics, 15 diagnostic tools. No nag screens, no crippled features.
 * **Privacy-first.** No visitor data leaves your server. GDPR and CCPA compliant
   out of the box.
 * **Works with everything.** Cloudflare, WP Rocket, LiteSpeed, WooCommerce, Elementor,
   multisite, IPv6, PHP 7.4 to 8.5.

#### 🛡️ Core Firewall (Free)

 * **Three-Layer Architecture** – intercepts traffic at wp-config.php (before WordPress),
   MU-plugin phase, and main shield. Known threats are blocked before WordPress,
   plugins, or themes load – saving 30-100ms and 5-20MB RAM per blocked request.
   Zero-day attacks on other plugins never reach the vulnerable code.
 * **Web Application Firewall (WAF)** with real-time rule updates via the BotBlocker
   Threat Defense Feed
 * **2,899 User-Agent + 2,800+ bot signatures** – largest blacklist among WordPress
   plugins, covering Scrapy, Selenium, Puppeteer, PhantomJS, curl, wget, Python,
   Java, Perl, SQL injection tools
 * **Brute force protection** with progressive lockouts – 5 attempts per 15 minutes,
   escalating bans
 * **Rate Limiting** – sliding window velocity per IP. 30 req/min triggers CAPTCHA;
   50/min blocks IP for 10 min. Subnet aggregation catches distributed attacks. 
   Floor protection prevents false positives.
 * **Anti-spam** for comments, registration, contact forms
 * **XML-RPC and REST API** locked down by default with allowlist for trusted services
 * **HTTP method-level hardening** – CONNECT and TRACE blocked (XST attack prevention).
   OPTIONS handled for CORS preflight.
 * **Fake crawler detection** via FCrDNS (dual-direction DNS verification), ASN 
   tokens, and published IP ranges – 95% effective, impossible to spoof without 
   controlling the provider’s DNS zone.
 * **LLM / AI crawler management** – allow or block GPTBot, ChatGPT-User, ClaudeBot,
   PerplexityBot, Bytespider via CIDR-verified IP ranges (1,435 synced from cloud).
 * **Country, ASN, IP range, User-Agent, Referer** blocking rules with instant enforcement.
   ASN database: 3.6M verified records. Geo-blocking with visual country selector
   and import/export.
 * **Cloudflare-aware** real-IP resolution and origin bypass protection
 * **TLS fingerprinting (JA3/JA4)** – detects bots by TLS handshake signature, cross-
   validates against User-Agent. 189 signatures. Opt-in, requires server module.
 * **RKN (Roskomnadzor) blocking** – 852 CIDR ranges, cloud-synced, auto-updated
   with self-healing tamper recovery
 * **Full IPv6 support** – separate tables and logic for IPv4 and IPv6
 * **Live traffic monitor** with attack map, country, ASN, device, browser, block
   reason
 * **Built-in caching** via Redis and Memcached – free, auto-disable on connection
   failure

#### 🔍 Bot Detection & Anti-Detect (Free)

**13 HTTP header checks** run on every visitor, catching bots others miss:

 * **Empty User-Agent** / **UA Anomalies** / **Empty Accept-Language**
 * **PTR/DNS Mismatch** – forward/reverse DNS mismatch, impossible to fake
 * **Geo vs Language Mismatch** – language claimed differs from visitor’s country
 * **Incognito/Private Mode** detection
 * **AdBlock/uBlock** detection in visitor’s browser
 * **Canvas & WebGL Fingerprinting** – JS consistency verification
 * **WhatsApp Preview** / **OPTIONS Preflight** – legitimate traffic whitelisted

**Anti-Detect Challenge Page** activates when header checks raise suspicion – silent
browser fingerprinting before any CAPTCHA appears:

 * **9 weighted signals:** navigator (×2), fake plugins (×3), font rendering (×2),
   WebGL (×2), Chromium properties (×3), JS jitter, touch events (×2), language (
   ×3), incognito (×2)
 * **Critical signal combinations trigger immediate block**
 * Cookie capability test + sessionStorage retry counter
 * HMAC-signed responses resist DDoS provider interference
 * Circuit Breaker: 3 failures  30-second cooldown  auto-retry
 * CAPTCHA appears only if auto-verification fails

#### 🎯 CAPTCHA System – All 9 Modes Free

**9 CAPTCHA modes, all free:** Silent Auto-Verify (recommended – zero clicks, silent
JS fingerprint check), Simple Button, Color Buttons, Image CAPTCHA (5 packs: Eagle,
Horse, Raccoon, Dog, Cat), reCAPTCHA v2 (+ Button), Dynamic Shapes (60fps Canvas,
25 combinations), Dynamic Digits, Hold Button (hold in the green zone).

 * **Hybrid Mode** – internal CAPTCHA + invisible reCAPTCHA v3, two-layer defense
 * **DDoS Resilience Mode** – HMAC-signed responses prevent forged challenge bypass
 * **Session Token Verification** – cookie-less fingerprint for restricted hosting
 * **CAPTCHA Diagnostics** – failure reason codes (token decrypt, transient, hash,
   mode mismatch)
 * **Image Delivery:** Inline Base64 (single request, recommended) or Separate Requests(
   cache-friendly)

#### 🔒 Login Security & 2FA (Free)

 * **Two-Factor Authentication** (Google Authenticator, Authy, 1Password, Bitwarden)–
   TOTP, 10 backup codes
 * **9 CAPTCHA modes** on login, registration, lost password, and custom forms
 * **Hybrid Mode** – internal CAPTCHA + reCAPTCHA v3 two-layer invisible defense
   on login
 * **Hide login URL** _(PRO)_
 * **Configurable lockout escalation** – failed CAPTCHA = short ban, repeat = 24-
   hour ban

#### 💳 Payment Gateway Bypass (Free)

Auto-detects 25+ e-commerce platforms (WooCommerce, Easy Digital Downloads, SureCart,
MemberPress, Paid Memberships Pro, Give, Dokan, CartFlows, FunnelKit and more) and
150+ payment providers (Stripe, PayPal, Mollie, Adyen, Braintree, Square, Razorpay,
Klarna, Paddle, Authorize.Net, YooKassa, LiqPay and more), plus form plugin webhooks(
Contact Form 7, WPForms, Gravity Forms, Ninja Forms, Fluent Forms).

**Four detection layers – 198 path patterns, 227 query keys, 360 action names, 114
signature headers – ensure zero false positives.** Webhooks, IPN callbacks, and 
payment notifications never get blocked.

#### 📊 Visibility & Control (Free)

 * **Visual dashboard** – KPI cards (Requests, Blocked, Search engines passed, Protection
   score), hourly bar chart, donut charts (Hosting, Device, Browser, OS)
 * **Dashboard social proof card** – live WordPress.org rating, installs count, 
   ratings, link to WP.org (cached 12h)
 * **Inline IP rule widget** – add IP allow/block rules via AJAX. Bulk import with
   4 one-click buttons (IPv4/IPv6 whitelist/blacklist)
 * **Protection Status Checklist** – per-feature toggles with «Enable remaining»
   bulk action
 * **Health Score gauge** – 44 parameters, 3 categories, 5 levels from Critical (
   <25) to Secure (≥85), real-time updates
 * **3 security presets** – Light, Strong, Full – one-click configuration. Plus 
   Default for new installs
 * **Setup Wizard** – 8 steps, under 5 minutes
 * **⌘K Command Palette** – Ctrl+K / ⌘K on any admin page to search every setting,
   tab, and action. 30+ quick-action shortcuts. Near-zero-click configuration
 * **Interactive analytics** – 8 KPI metrics, donut charts, traffic line chart, 
   world map, top IPs and countries rankings
 * **55 diagnostic event codes** across 12 log categories – exact block reason for
   every decision
 * **Detailed event log** – IP, country, ASN, User-Agent, browser, OS, device, exact
   block reason
 * **17 interface languages** – English, Deutsch, Español, Français, Polski, Русский,
   Українська, العربية, עברית, Italiano, 日本語, 한국어, Nederlands, Português, 
   Svenska, Türkçe, 中文 + POT
 * **Admin page header bar** – «Blocked today: X · Total: Y» on every admin page
 * **Admin bar toolbar node** – protection status + Dashboard + Settings links
 * **Configurable retention** with timezone/DST awareness, Daily Summary with incremental
   aggregation
 * **X-Robots-Tag control** – SEO directives (noindex, nofollow, noarchive, nosnippet,
   noimageindex, notranslate, unavailable_after) on blocked/challenge pages – no
   search engine indexing of security barriers
 * **Clean uninstall** – drops 17 tables, 40+ options, 22+ transients, 12 cron hooks,
   MU-plugin files, uploads/botblocker/. Departure feedback dialog. Zero leftover
   data

#### 📬 Notifications & Alerts (Free)

 * **Email reports** – daily / twice-weekly / monthly security summaries. Critical
   server load warnings and Cloud API expiry alerts.
 * **Telegram Bot integration (add-on)** – weekly security summaries via @BotFather:
   requests, allowed, blocked, suspicious, search/fake bots, timezone, protection
   mode, security score, block rate. Connection test button. Add-ons  Telegram Notifications.
 * **Admin Dashboard Alerts (8 types)** – cloud lost, missing runtime files, API
   expired, hits exhausted, ASN/addon update failed, addon incompatible, cache incompatibility

#### 🧩 Shortcodes & Developer Tools (Free)

**20 shortcodes** for frontend dashboards, client portals, and status pages.
 * **
WP Connectors (WordPress 6.7+)** – native WordPress Connector on the Connections
admin page * **Custom verification endpoint** (`bbcs-verify`) – decoupled from permalink
structure * **WordPress Admin  Tools  Site Health  Info** integration * **Plugin
update changelog injection** – changelog displayed in the plugin update screen ***
Floating support widget** – submit support tickets from dashboard without leaving
site

#### 🔧 Tools & Diagnostics (Free)

**15 maintenance and diagnostic actions** built into the admin panel:

**Export Data & Settings** Full JSON backup of settings, rules, IP lists
 **Import
Data & Settings** Restore from JSON backup **Reinstall Database** Factory-reset 
all BotBlocker tables **Repair & Optimize DB** WordPress database repair and optimization**
Clear All Visitor Data** Purge hits, counters, and statistics **Clear Transients**
Remove expired WordPress transients **Update ASN Database** Download latest 3.6M-
record ASN geolocation database **Update RU-Gov List** Download latest 852-range
RKN CIDR blocklist **Sync LLM Providers** Refresh 1,435 AI crawler IP ranges from
cloud **Clear Visitor Cookies** Reset all BotBlocker cookies – forces re-verification**
Reset URL Rewrite Rules** Fix 404 errors after permalink changes **Clear Object 
Cache** Flush WordPress + Redis/Memcached caches **Site Health** Open WordPress 
Site Health diagnostic **Clear Debug Log** / **Download Debug Log** Purge or download
wp-content/debug.log

#### 🚀 PRO Adds (Premium / Pro / Ultimate)

 * **Cloud Threat Intelligence** – 5M+ attack IPs cross-checked globally. Zero-day
   behavioral and heuristic detection catches unknown attack patterns before signatures
   exist. VPN, Tor, proxy, ASN, hosting reputation checks.
 * **Early Init Mode** – filtering before WordPress Core loads via wp-config.php
   boot code. Saves 30-100ms and 5-20MB RAM per blocked request. Multisite-aware,
   auto-disables if Cloud API inactive. Self-healing runtime files.
 * **Hide Login URL** – custom admin URL slug. Four behaviors on default URL: 403,
   404, home redirect, custom redirect. Reserved slug detection prevents page conflicts.
 * **Security Headers** – MU-plugin deployment before plugins load. HSTS, CSP with
   custom domain whitelist, X-Frame-Options, X-Content-Type-Options, Permissions-
   Policy. Auto-detects reCAPTCHA Google + BotBlocker API domains in CSP.
 * **Speed Up WordPress** – 14 frontend and server optimizations: disable emojis,
   jQuery Migrate, dashicons, global styles, embeds, RSS feeds, XML-RPC, hide WP
   version, shortlinks, self-pingbacks.
 * **Malware Scanner** – 25+ detection patterns: eval() chains, base64 obfuscation,
   injected scripts, webshell markers. Deobfuscation preprocessor. Scans files (
   core, plugins, themes, uploads, custom paths) + database (posts, wp_options, 
   users, cron). Truth Source comparator. Scheduled background scanning (hourly 
   to 5 days). Severity: Critical to Info. Confidence: Review to Confirmed.
 * **HTTPS Protocol** – HTTPHTTPS 301 redirect. Mixed content auto-fix via output
   buffering. SSL detection behind 7 proxy headers (Cloudflare, load balancers).
 * **Cookie Alert** – lightweight first-party cookie consent banner. Custom text,
   policy link, button label, position, theme, custom CSS. WP accessibility: aria-
   label, role attributes. 1-year cookie lifetime.
 * **Behavioral Analysis Engine** – 3-layer AI bot detection. Free: RPM velocity
   + subnet pressure. Pro: multi-signal scoring (velocity, URI diversity, session
   depth, timing, referer consistency). Reputation: IP/subnet tracking with lazy
   decay. 3 quick presets.
 * **Cron Jobs** – advanced WordPress cron management, monitoring, and debugging
 * **Truth Source** – file integrity verification against known-good WordPress core,
   plugin, theme references. Detects modified, added, missing files. Per-file and
   wildcard ignores. Scheduled background scanning.
 * **XMLRPC Tunnel** – secure XML-RPC via IP-allowlisted endpoints. IPv4/IPv6/CIDR/
   wildcard entry formats. Multi-header real-IP resolution. Auto-block non-allowlisted
   access.
 * **Priority support** – 24-hour response time

Four plans to match your traffic: **Premium** ($12/month, 25k cloud checks), **Pro**(
$50/month, 100k cloud checks), **Ultimate** ($100/month, 250k cloud checks + emergency
24h support). Annual billing includes 1 month free. 30-day refund policy. Licensed
per domain via Freemius.

[Compare plans ](https://botblocker.top/pricing/)

#### ⚡ Performance & Compatibility

 * **Zero database queries** for returning visitors – 11 runtime PHP files with 
   SHA-256 integrity, loaded via `include`
 * Measured overhead: **+3-15ms** TTFB for cached visitors, **+50-200ms** first-
   time PTR lookups, **+2-4MB** memory
 * **100+ configurable settings** without affecting performance
 * Redis and Memcached support – free, auto-disables gracefully on connection failure
 * **Cache plugin compatibility** – automatic `DONOTCACHEPAGE` and cache-bypass 
   headers (`Cache-Control: no-store`, `X-LiteSpeed-Cache-Control: no-cache`, `X-
   Accel-Expires: 0`, `CDN-Cache-Control: no-store, private`, `Surrogate-Control:
   no-store, max-age=0`) covering PHP caches, Nginx, CDN edge, and surrogate caches
   in one pass. Works with WP Super Cache, W3 Total Cache, WP Rocket, LiteSpeed,
   Hummingbird, WP Fastest Cache, Cache Enabler, Swift Performance.
 * **CDN and WAF compatibility** – Cloudflare, Sucuri, Incapsula, AWS CloudFront,
   Fastly, KeyCDN, StackPath. Multi-header real-IP resolution (CF-Connecting-IP,
   X-Forwarded-For, X-Real-IP)
 * **DDoS Protection Compatibility** – auto-detects JS-challenges from DDoS-Guard,
   Stormwall, Qrator. HMAC-signed AJAX responses, Circuit Breaker with retry/backoff.
   The only WordPress plugin that works correctly behind aggressive DDoS protection
   without manual configuration.
 * **Fatal Error Hive Mode** – during PHP fatal errors from other plugins or themes,
   renders an emergency page instead of a white screen, preserving the security 
   barrier.
 * **Multisite Support** – network activation, per-site data, settings, cleanup.
   Free on all plans.
 * **PHP 7.4 – 8.5**, tested across 7 versions. **WordPress 5.1 – 7.0+**. Linux 
   and Windows.
 * **50+ OS versions detected** – Windows 95–11, macOS, Android, iOS, Chrome OS,
   Linux distros, HarmonyOS, Fire OS, KaiOS, Tizen, FreeBSD, gaming consoles
 * **50+ browsers identified** – Opera, Edge, Vivaldi, Brave, Samsung Internet, 
   UC Browser, Yandex, DuckDuckGo, Tor, Headless Chrome, Lynx/ELinks, and more
 * GDPR and CCPA compliant – no PII, technical parameters only, Legitimate Interest
   basis (Art. 6(1)(f))

## Screenshots

[⌊Dashboard with KPI cards, attack map, blocked-vs-allowed chart, hourly bar chart,
distribution donuts, and social proof card⌉⌊Dashboard with KPI cards, attack map,
blocked-vs-allowed chart, hourly bar chart, distribution donuts, and social proof
card⌉[

Dashboard with KPI cards, attack map, blocked-vs-allowed chart, hourly bar chart,
distribution donuts, and social proof card

[⌊8-step Setup Wizard - from welcome to test attack in under 5 minutes⌉⌊8-step Setup
Wizard - from welcome to test attack in under 5 minutes⌉[

8-step Setup Wizard – from welcome to test attack in under 5 minutes

[⌊Two-Factor Authentication setup with QR code and backup codes⌉⌊Two-Factor Authentication
setup with QR code and backup codes⌉[

Two-Factor Authentication setup with QR code and backup codes

[⌊Live traffic monitor with full request context - IP, country, ASN, device, browser,
block reason⌉⌊Live traffic monitor with full request context - IP, country, ASN,
device, browser, block reason⌉[

Live traffic monitor with full request context – IP, country, ASN, device, browser,
block reason

[⌊CAPTCHA mode selector - all 9 modes with visual preview and Hybrid Mode toggle⌉⌊
CAPTCHA mode selector - all 9 modes with visual preview and Hybrid Mode toggle⌉[

CAPTCHA mode selector – all 9 modes with visual preview and Hybrid Mode toggle

[⌊Rules manager - IP, IP range, ASN, country, User-Agent, Referer, hostname, path
rules⌉⌊Rules manager - IP, IP range, ASN, country, User-Agent, Referer, hostname,
path rules⌉[

Rules manager – IP, IP range, ASN, country, User-Agent, Referer, hostname, path 
rules

[⌊Anti-detect settings - 9 weighted detection signals with individual toggles⌉⌊Anti-
detect settings - 9 weighted detection signals with individual toggles⌉[

Anti-detect settings – 9 weighted detection signals with individual toggles

[⌊Rate limiting configuration - sliding window, thresholds, subnet aggregation, 
floor protection⌉⌊Rate limiting configuration - sliding window, thresholds, subnet
aggregation, floor protection⌉[

Rate limiting configuration – sliding window, thresholds, subnet aggregation, floor
protection

[⌊Telegram Bot integration (add-on) - Bot Token + Chat ID setup with connection 
test⌉⌊Telegram Bot integration (add-on) - Bot Token + Chat ID setup with connection
test⌉[

Telegram Bot integration (add-on) – Bot Token + Chat ID setup with connection test

[⌊Tools panel - 15 maintenance and diagnostic actions with one-click execution⌉⌊
Tools panel - 15 maintenance and diagnostic actions with one-click execution⌉[

Tools panel – 15 maintenance and diagnostic actions with one-click execution

## Installation

#### 60-second setup

 1. In WordPress admin, go to **Plugins  Add New** and search for «BotBlocker Security»
 2. Click **Install Now**, then **Activate**
 3. Open **BotBlocker** in the admin menu and follow the Setup Wizard – 8 steps with
    compatibility test and test attack

Default settings protect most sites immediately. For advanced configuration, three
security presets (Light / Strong / Full) give you one-click protection tuned to 
your needs.

## FAQ

### Is BotBlocker Security really free?

Yes. The free version includes: three-layer firewall, all 9 CAPTCHA modes, anti-
detect scoring, FCrDNS bot verification, rate limiting, 2FA with backup codes, anti-
spam, brute-force protection, XML-RPC and REST API protection, live traffic monitor,
Telegram alerts, 20 shortcodes, 15 diagnostic tools, command palette, Redis/Memcached,
Multisite support, and DDoS compatibility. PRO adds cloud threat intelligence (5M
+ attack IPs), Early Init Mode, premium addons (Hide Login, Security Headers, Speed
Up, Malware Scanner, Behavioral Analysis, and more), and priority support. Premium
starts at $12/month.

### Will it slow down my site?

No. Measured overhead is +3-15ms for verified visitors with zero database queries–
all rules load from 11 pre-generated PHP files with SHA-256 integrity. Under attack,
server load typically **drops** because bad requests are rejected at the earliest
interception layer, before WordPress, PHP, or database code runs. FULL mode saves
30-100ms and 5-20MB RAM per blocked request.

### Does it work with Cloudflare or a CDN?

Yes. BotBlocker reads proxy headers (CF-Connecting-IP, X-Forwarded-For, X-Real-IP)
to find the real client IP and blocks attempts to bypass Cloudflare by hitting your
origin directly. Fully compatible with Cloudflare, Sucuri, Incapsula, AWS CloudFront,
Fastly, KeyCDN, and StackPath.

Cloudflare Business+ users can also enable TLS fingerprinting (JA3/JA4) for bot 
detection – see `docs/TLS-FINGERPRINTING.md`.

### Does it work with WooCommerce and payment gateways?

Yes. Auto-detection for 25+ e-commerce platforms and 150+ payment providers. Stripe,
PayPal, Mollie, Adyen, Razorpay, YooKassa, and other webhooks are automatically 
recognized and never blocked. Four detection layers (198 path patterns, 227 query
keys, 360 action names, 114 signature headers) ensure zero interference with payment
processing. Bypass modes (full/partial), settings and hardening recommendations:
see `docs/PAYMENT-BYPASS.md`.

### Does it work with caching plugins?

Yes. BotBlocker automatically sets `DONOTCACHEPAGE` and multiple cache-bypass headers(`
Cache-Control: no-store`, `X-LiteSpeed-Cache-Control`, `X-Accel-Expires`, `CDN-Cache-
Control`, `Surrogate-Control`) on verification pages so PHP-based caches, Nginx 
reverse proxies, CDN edges, and surrogate caches never store security barriers. 
Works out of the box with WP Super Cache (PHP mode), W3 Total Cache, WP Rocket, 
LiteSpeed Cache, Hummingbird, WP Fastest Cache, Cache Enabler, and Swift Performance.
Server-level caches (Nginx FastCGI, Varnish) need a cookie-based bypass rule – see`
docs/CACHE-COMPATIBILITY.md`.

### Does it work behind DDoS-Guard, Stormwall, or similar services?

Yes. Since version 1.6.13, BotBlocker auto-detects JS-challenges from external DDoS
protection services. HMAC-signed AJAX responses let the plugin distinguish its own
responses from DDoS-provider challenge pages. Circuit Breaker prevents retry storms(
3 failures  30-second cooldown). BotBlocker is the only WordPress security plugin
that works correctly behind aggressive DDoS protection without manual whitelisting.
See `docs/DDOS-COMPATIBILITY.md`.

### Will it lock me out?

No. BotBlocker auto-detects your server IP during setup and lets you allowlist admin
IPs and trusted services. WP-Cron and internal WordPress calls always pass. If you
ever get locked out, a hashed Secret URL (generated in the admin panel and sent 
to the admin email) provides emergency access – no FTP required.

### Does it collect visitor data?

No. Only technical request parameters (IP, headers, User-Agent) are analyzed locally
on your server. No PII is stored or sent anywhere. GDPR-compliant under Legitimate
Interest (Art. 6(1)(f)). CCPA compliant – no PII collection, no data sale. Full 
details in `docs/PRIVACY.md`.

### Does it support IPv6?

Yes. Every feature works with IPv4, IPv6, or dual-stack setups. Separate database
tables and logic for each protocol family.

### Does it support multisite?

Yes, since version 1.6.15. Network activation, per-site data isolation, per-site
settings, and per-site cleanup on uninstall. Free on all plans.

### Will it conflict with Wordfence, Sucuri, or other security plugins?

BotBlocker is designed to coexist. It operates very early in the request lifecycle
and typically works alongside other plugins. The only thing to avoid is enabling
the same CAPTCHA twice on the same form. Most users replace their previous security
stack entirely.

### Which CAPTCHA should I choose?

**Silent Auto-Verify** is the recommended default. Real users pass with zero clicks
via JavaScript fingerprint checks behind the scenes – they see nothing. Bots see«
Access denied.» For login pages, combine Silent Mode with reCAPTCHA v3 in Hybrid
Mode for two-layer invisible defense. Shapes CAPTCHA (60fps Canvas with moving geometric
figures) is the strongest against AI-based CAPTCHA solvers – it requires real-time
computer vision, making it roughly 100x more expensive to crack than standard reCAPTCHA.

### How does BotBlocker verify search engine bots?

Through **FCrDNS** (Forward-confirmed Reverse DNS) – the same method used by Cloudflare
Bot Management, DataDome, and Akamai Bot Manager. Googlebot is verified via PTR (.
googlebot.com) + ASN (15169). YandexBot uses triple verification (PTR + ASN 13238
+ IP CIDR). Facebook gets dual verification (PTR + ASN 32934). Multi-resolver DNS
fallback for reliability. 95% effective against fake crawlers – you cannot spoof
FCrDNS without controlling the provider’s DNS zone.

### Does BotBlocker use honeypots?

Yes – several kinds, layered at different levels:

 * **Challenge page decoys.** CAPTCHA modes render invisible decoy buttons with 
   generated class names and styles (`display:none` on random per-request hashes).
   Clicking a decoy submits a wrong challenge hash and the request is rejected. 
   Decoys are re-generated per request, so bot patterns cannot be hardcoded.
 * **Hidden autofill trap.** The check page contains a CSS-hidden text input with
   a rotating per-request name (salt + time hash). Blind automation that fills every
   form field trips the trap and is rejected server-side before any token is verified.
 * **Submit-timing signal.** The page records load time and reports the submit delta;
   sub-300ms submissions (without human interaction time) are rejected. Disabled
   in Silent Auto-Verify mode, where legitimate browsers submit immediately.
 * **Challenge token layer.** Every CAPTCHA mode uses a signed challenge nonce +
   answer hash; any wrong, stale, or forged token fails verification regardless 
   of the honeypots above.

The server-side honeypot validation runs in both protection modes (FULL and FRONTEND)
and on both verification endpoints (AJAX verification and the `/bbcs-verify/` endpoint),
before any cookie or token is issued.

### Can I block AI crawlers (ChatGPT, Claude, Perplexity)?

Yes. GPTBot, ChatGPT-User, OAI-SearchBot, ClaudeBot, Claude-SearchBot, and PerplexityBot
are verified via 1,435 CIDR ranges synced from the cloud API. You can allow or block
each provider independently. Bytespider (ByteDance) is verified via PTR (.bytedance.
com). Trusted AI crawlers pass; impersonators are blocked.

### Can I get Telegram notifications?

Yes. Free. Connect a Telegram bot via @BotFather, then open Add-ons  Telegram Notifications
and enter the Bot Token and Chat ID. You’ll receive weekly security summaries: total
requests, allowed, blocked, suspicious, search bots, fake bots, plus timezone, protection
mode, security score, and block rate. A connection test button verifies setup instantly.

### Can I display security stats on the frontend of my site?

Yes. 20 shortcodes let you embed counters, charts, health gauges, top IPs/countries,
system status, and more on any page. Perfect for client dashboards, status pages,
and public security transparency reports.

### What is the Health Score?

A 44-parameter security assessment displayed as a visual gauge (0-100). Five levels:
Critical (<25), Weak (25-49), Moderate (50-69), Strong (70-84), Secure (≥85). Three
categories weighted: core protection (75%), cloud extended (25%), neutral indicators.
The score updates in real-time as you change settings – a built-in guide to improving
your site’s security posture.

### Does the PRO version include a trial?

No traditional trial. Instead, the free version includes the full firewall, all 
9 CAPTCHA modes, anti-detect scoring, rate limiting, FCrDNS verification, 2FA, Multisite,
Redis/Memcached, Telegram alerts, shortcodes, and live traffic monitoring – enough
to protect most sites permanently. A limited-time Premium promo (14 days, no credit
card) is available inside the plugin to try cloud features. PRO plans start at $
12/month with a 30-day refund policy.

### What happens when I delete the plugin?

Clean uninstall: all 17 database tables are dropped, 40+ WordPress options deleted,
22+ transients cleared, 12 cron hooks removed, MU-plugin files cleaned, and the 
uploads/botblocker/ directory deleted. On multisite, per-site cleanup runs in batches
of 50. Uninstall feedback dialog collects your reason for leaving. Zero leftover
data – no orphaned rows, no stale cron jobs.

### Is my visitors’ data collected or stored?

No. BotBlocker Security does **not** collect or process personal data of your visitors.
All cloud analysis is performed on technical parameters only (IP, headers, User-
Agent). No personally identifiable information is collected, stored, or transmitted
to any external service.

### Where can I find documentation and support?

 * Product site: [https://botblocker.top/products/](https://botblocker.top/products/)
 * Pricing and PRO plans: [https://botblocker.top/pricing/](https://botblocker.top/pricing/)
 * Documentation: [https://botblocker.top/docs/](https://botblocker.top/docs/)
 * Contact/support: [https://botblocker.top/contacts/](https://botblocker.top/contacts/)
 * Community: [https://botblocker.top/community/](https://botblocker.top/community/)

### What license is BotBlocker Security under?

GPLv2 or later. See LICENSE.txt for details.

### Who develops BotBlocker Security?

Developed and maintained by GLOBUS.studio. Concept, architecture & code – Yevhen
Leonidov ([https://leonidov.dev/](https://leonidov.dev/)). Code, code review – Andrii
Lukashevych. Code, translations – Aleksandr Kinakh.

## Reviews

![](https://secure.gravatar.com/avatar/c7266388481d05b62b6e0c6974425bafbd793e3e5e5ea469755925f696a059ec?
s=60&d=retro&r=g)

### 󠀁[surprised](https://wordpress.org/support/topic/surprised-6/)󠁿

 [gorrr](https://profiles.wordpress.org/gorrr/) 19 de agosto, 2026

A surprisingly good service. It's unclear why there are so few reviews. The authors
have done a tremendous job and the result is a great plugin with extensive functionality.

![](https://secure.gravatar.com/avatar/ea7d81111c91ad5859014b13bd437fd26a87005517b41b02506b202e639f4977?
s=60&d=retro&r=g)

### 󠀁[Отличная защита сайта](https://wordpress.org/support/topic/%d0%be%d1%82%d0%bb%d0%b8%d1%87%d0%bd%d0%b0%d1%8f-%d0%b7%d0%b0%d1%89%d0%b8%d1%82%d0%b0-%d1%81%d0%b0%d0%b9%d1%82%d0%b0/)󠁿

 [sergey1it](https://profiles.wordpress.org/sergey1it/) 25 de abril, 2026

Отличная защита сайта, которая не ломает и не тормозит сайт! Из всего что я пробовал–
первый плагин, который реально ускоряет, а не замедляет. Настроек много, гибкий.
Иногда сложно разобраться, поэтому разбирался не быстро. Хотелось бы более детальный
мастер настроек. Спасибо!

![](https://secure.gravatar.com/avatar/f2de7af2094f05e2c0ba8288c6727affa2079cb001dfdb1aa0494bbee5aad143?
s=60&d=retro&r=g)

### 󠀁[Reliable Bot Protection With Easy Setup and Performance](https://wordpress.org/support/topic/reliable-bot-protection-with-easy-setup-and-performance/)󠁿

 [daniellwlli](https://profiles.wordpress.org/daniellwlli/) 17 de abril, 2026

BotBlocker Security works great—blocks spam bots effectively with no slowdown.Easy
setup, reliable protection, and runs smoothly without hassle.

![](https://secure.gravatar.com/avatar/da49e1d9fa5df45f73b71c65951b0d94ea8df5d06ea20158b2722c48436a400c?
s=60&d=retro&r=g)

### 󠀁[Надёжный плагин](https://wordpress.org/support/topic/%d0%bd%d0%b0%d0%b4%d1%91%d0%b6%d0%bd%d1%8b%d0%b9-%d0%bf%d0%bb%d0%b0%d0%b3%d0%b8%d0%bd/)󠁿

 [dmitrypetrov81](https://profiles.wordpress.org/dmitrypetrov81/) 9 de abril, 2026

Надёжный и продуманный плагин безопасности, благодарю защита действительно на высоте!

![](https://secure.gravatar.com/avatar/de441e3d0f898955ffeb09e7ea0e0a7626aacdad54b5f0d20be9983114dffb58?
s=60&d=retro&r=g)

### 󠀁[Best bot protection](https://wordpress.org/support/topic/best-bot-protection/)󠁿

 [Rajat Singh](https://profiles.wordpress.org/couponzania/) 2 de marzo, 2026 2 replies

Best bot protection + awesome support.

![](https://secure.gravatar.com/avatar/9e1bed2248a5e5bff27ff266f6d05b753c52306ba882f03afe642737d598f925?
s=60&d=retro&r=g)

### 󠀁[Отличный антибот!](https://wordpress.org/support/topic/%d0%be%d1%82%d0%bb%d0%b8%d1%87%d0%bd%d1%8b%d0%b9-%d0%b0%d0%bd%d1%82%d0%b8%d0%b1%d0%be%d1%82/)󠁿

 [alexeyit](https://profiles.wordpress.org/alexeyit/) 26 de febrero, 2026 2 replies

Наверное самый лучший и самый быстрый антибот. И главное, реально снизил нагрузку
на сервер, притом ощутимо! Спасибо вам огромное. Добавьте плиз по-больше ИИшек в
белый лист! Ну и отдельный респект за такую крутую статистику посещений, это реально
круто.

 [ Read all 10 reviews ](https://wordpress.org/support/plugin/botblocker-security/reviews/)

## Contributors & Developers

“BotBlocker Security – Complete security platform” is open source software. The 
following people have contributed to this plugin.

Contributors

 *   [ Yevhen Leonidov ](https://profiles.wordpress.org/globusstudio/)
 *   [ Andrii Lukashevych ](https://profiles.wordpress.org/alukashevych/)
 *   [ Aleksander Kinakh ](https://profiles.wordpress.org/alexandrkinakh/)

“BotBlocker Security – Complete security platform” has been translated into 7 locales.
Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/botblocker-security/contributors)
for their contributions.

[Translate “BotBlocker Security – Complete security platform” into your language.](https://translate.wordpress.org/projects/wp-plugins/botblocker-security)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/botblocker-security/),
check out the [SVN repository](https://plugins.svn.wordpress.org/botblocker-security/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/botblocker-security/)
by [RSS](https://plugins.trac.wordpress.org/log/botblocker-security/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.7.5

Real-time block alerts now delivered in the background for Pusher and Telegram add-
ons
 Add-on Tools page extension filters (bbcs_tools_nav_groups / bbcs_tools_tabpanels)
for third-party add-ons Cross-platform add-on packaging with forward-slash ZIP entries
Fix minor bugs and improve stability Audit log Add new layer of honeypot

#### 1.7.4

Speed up admin UI for faster dashboard loading
 Add new security options for tighter
protection Add early-stage country blocking at the earliest interception layer Fix
minor bugs and improve stability

#### 1.7.3

Fix cron reliability on free hosting
 Minor bug fixes and improvements.

#### 1.7.2

Fix minor bugs, improve background task management, optimize for WordPress 7.0.2

#### 1.7.1

Fix minor bugs

#### 1.7

Add completely redesigned admin interface with modern multipage layout, KPI cards
and command palette integration
 Add Toastify notification system Add new setup 
wizard Add new addon marketplace page with one-click install Add 10 new interface
languages: Arabic, Hebrew, Italian, Japanese, Korean, Dutch, Portuguese (Brazil),
Swedish, Turkish, Chinese (Simplified) – 17 languages total Add Behavioral Analysis
Engine addon with real-time pattern detection and scoring Add Cookie Alert addon
Add Cron Jobs addon Add Truth Source addon Add XMLRPC Tunnel addon Add rate limiting
system Add TLS fingerprinting (JA3/JA4) Add Telegram Bot integration Add hot bans
system Add core rate limit trait Add malware scanner pre-processor Add malware truth
source verification comparing scanned files against known-good WordPress references
Add HTTPS Protocol addon Add short-term bans with configurable duration and automatic
expiration Add session token verification improvements for restricted hosting environments
Add KPI polling with real-time dashboard statistics updates

#### 1.6.21

Add LLM/AI Crawler Whitelist system with dedicated database, admin management UI,
and cloud-synced coverage for OpenAI, Claude, Gemini, Perplexity, and other AI crawlers

Add Daily Summary Statistics pipeline with incremental aggregation for fast multi-
day analytics Add Geo-Blocking – block entire countries from admin dashboard with
import/export support Add DDoS Resilience Mode – HMAC-signed verification responses
prevent forged challenge bypass Add Session Token Verification – cookie-less browser
fingerprint for restricted hosting environments Add Data File Tampering Detection–
automatic recovery from corrupted runtime data files Add Addon Traffic Decision 
Pipeline – 6 interception points for addons to control visitor flow at each stage
Add Centralized Alert System – admin alerts for cloud connection, ASN database, 
file integrity, and cache plugin conflicts Add RKN (Roskomnadzor) IP Blocking – 
cloud-synced Russian government blocklist with CIDR matching, scheduled auto-update,
self-healing, and manual refresh from admin tools Improve verified crawler coverage–
WhatsApp, Bluesky (Cardyb), BingPreview with updated Yandex CIDRs and ASN tokens
Improve multisite support – per-site early init bootstrap generation, addon lifecycle
fixes across network sites Improve compatibility – WordPress Plugin Check compliance,
nonce_user_logged_out guard for third-party plugin conflicts, WP-Cron and core update
screen bypass

#### 1.6.20

Add WordPress 7.0 compatibility and Connections support for BotBlocker Security

Fix WordPress 7.0 REST OPTIONS permission checks from wp-admin pages Add ASN allow,
block, dark, and gray rule handling with safer crawler verification Improve anti-
detect checks for critical browser fingerprint mismatch combinations Fix Geo country
rule sanitization and Cloud API contact email validation Improve plugin update notices
when remote changelog data is unavailable

#### 1.6.19

Add new security rules to block emerging threats with updated ASN coverage
 Update
coverage for new bots and crawlers Add coverage for 20+ payment providers in the
Payment Gateway Bypass whitelist Add HEAD request support for security checks and
blocking Fix minor bugs and UI glitches in admin panel Fix language selection issue
Fix setup wizard issue with some hosting environments Update translation files

#### 1.6.18

Add new ASN database with auto-update
 Add Payment Gateway Bypass: dedicated whitelist
for legitimate payment callbacks (webhooks, IPN, postbacks) so checkout notifications
are never blocked Add auto-detection for 25+ e-commerce platforms (WooCommerce, 
EDD, SureCart, MemberPress, RCP, PMPro, Give, Dokan, WCFM, CartFlows, FunnelKit,
etc.) Add built-in coverage for 30+ payment providers: Stripe, PayPal, Mollie, Adyen,
Braintree, Square, Razorpay, CloudPayments, WayForPay, LiqPay, Fondy, PayU, Klarna,
Paystack, Flutterwave, GoCardless, Paddle, Authorize.Net, 2Checkout and more Add
new «Payment Gateways» tab in Advanced Settings

#### 1.6.17

Fix third-party library compatibility issues affecting some hosting environments

Fix minor bugs and plugin incompatibilities with popular WordPress plugins Improve
legacy browser support Improve Security Headers addon with stricter defaults and
additional directives Improve shared hosting compatibility with enhanced environment
detection and fallback logic Improve statistics and reporting Add updated ASN tables
Add cookie diagnostics tool Add cache compatibility Update vulnerability signature
database Update translation files

#### 1.6.16

Add new CAPTCHA mode: Silent Auto-Verify – real users pass automatically with zero
interaction, bots see «Access denied»
 Add Silent Auto-Verify as the new recommended
default in the setup wizard Add Security Headers addon support (HSTS, CSP, X-Frame-
Options, Permissions-Policy – coming soon to the addon marketplace) Add updated 
LLM and AI bot whitelist Add improved ASN validation with extended provider database
and stricter hosting/VPN detection Add improved PTR record verification with multi-
resolver fallback for more accurate fake-crawler detection Add cache compatibility
for Swift Performance, Cache Enabler, and Starter Templates caching Fix CAPTCHA 
challenge token race condition in extended secure mode (SECURE_MODE_FULL) Fix GD
library fallback – now correctly falls back to Simple Button (mode 0) instead of
Color Buttons when GD and reCAPTCHA are both unavailable Fix CAPTCHA timeout handling
for Silent Auto-Verify mode to prevent potential redirect loops Fix 2FA backup code
validation edge case on PHP 8.5 Improve challenge token security with mode-specific
transient TTL (1 hour for Silent Auto-Verify) Improve silent mode retry logic with
sessionStorage-based counter surviving page reloads Improve setup wizard UI – removed
duplicate «Recommended» badge from Image Recognition Update translation files

#### 1.6.15

Add multisite support
 Add LLM whitelist for trusted crawlers and services Add new
security rules to block emerging threats Add compatibility improvements for WordPress
6.9.4 Fix minor bugs and UI glitches in admin panel Update translation files

#### 1.6.14

Add automatic DDoS protection service compatibility (DDoS-Guard, Stormwall, etc.)

Add docs/DDOS-COMPATIBILITY.md documentation Update cache compatibility layer Update
2FA libraries Update translation files

#### 1.6.13

Improve support for shared hosting environments with dynamic self-IP detection and
allowlist management
 Improve statistics sammary generation Update browser detection
Update OS detection Add privacy readme file Update translation files

#### 1.6.12

Add new mode of image CAPTCHA: Image Delivery Mode (for high-traffic sites with 
caching)
 Improve compatibility with Firefox and Safari browsers Fix minor issues
with CAPTCHA rendering in some environments Fix lagacy mode of Image CAPTCHA Update
translation mode

#### 1.6.11

Add new captcha type: hold button
 Add cache compatibility layer: no-cache headers,
DONOTCACHEPAGE, MU-phase cookie check Add Vary: Cookie header option (Settings  
Cookies  Cache Compatibility) Add cache plugin incompatibility detection and admin
alerts Add docs/CACHE-COMPATIBILITY.md with Nginx, Varnish, Apache, Cloudflare config
examples Add new security rules to block emerging threats Import data security improvements
Update libraries and dependencies Improve translation files Fix minor bugs

#### 1.6.10

Fix captcha verification issue in some environments
 Fix minor UI glitches in admin
panel Add OpenAI, Claude, and Gemini user agent detection

#### 1.6.9

Add 2FA support for admin users
 Add setup wizard improvements Add PRO features 
Fix performance issue in some environments Improve translation files Update libraries
Update admin CSS styles

#### 1.6.8

Fix cookie setting issue in some environments
 Fix minor UI glitches in admin panel
Fix translation string issues

#### 1.6.7

Add extended secure mode
 Fix gauge chart rendering issue in some environments Add
missing translation strings Add PHP 8.5 compatibility improvements

#### 1.6.6

Fixed issue with cloud status page description not displaying correctly.
 Fixed 
minor UI glitches in admin panel. Add compatibility improvements for WordPress 6.9
Improved translation files.

#### 1.6.5

Minor bug fixes and improvements. Enhanced compatibility with WordPress 6.8

#### 1.6.4

Improved compatibility with various hosting environments. Minor bug fixes and performance
optimizations.

#### 1.6.3

Bug fixes and improvements. Plugin now uses upload directory for better compatibility.

#### 1.6.2

Major update: migrated to Chart.js for faster statistics rendering. Updated libraries
and fixed minor bugs.

#### 1.6.1

Maintenance release with bug fixes, updated libraries, and license improvements.

#### 1.6.0

Significant performance improvements and extended detection layers for enhanced 
security.

#### 🤝 Trusted by

 * 3,000+ active installations
 * Translated into 17 languages
 * Tested up to WordPress 7.1 and PHP 8.5
 * Developed and maintained by GLOBUS.studio

> «Replaced two security plugins and a CAPTCHA plugin with one. Site is faster and
> the spam stopped overnight.» – WordPress.org user

**BotBlocker Security – Complete security platform for your WordPress site.**

## Meta

 *  Version **1.7.5**
 *  Last updated **3 semanas ago**
 *  Active installations **3.000+**
 *  WordPress version ** 5.1 or higher **
 *  Tested up to **7.1.2**
 *  PHP version ** 7.4 or higher **
 *  Languages
 * [Chinese (China)](https://cn.wordpress.org/plugins/botblocker-security/), [English (US)](https://wordpress.org/plugins/botblocker-security/),
   [German](https://de.wordpress.org/plugins/botblocker-security/), [Polish](https://pl.wordpress.org/plugins/botblocker-security/),
   [Russian](https://ru.wordpress.org/plugins/botblocker-security/), [Spanish (Spain)](https://es.wordpress.org/plugins/botblocker-security/),
   [Swedish](https://sv.wordpress.org/plugins/botblocker-security/) y [Ukrainian](https://uk.wordpress.org/plugins/botblocker-security/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/botblocker-security)
 * Tags
 * [anti-spam](https://pe.wordpress.org/plugins/tags/anti-spam/)[Brute Force](https://pe.wordpress.org/plugins/tags/brute-force/)
   [captcha](https://pe.wordpress.org/plugins/tags/captcha/)[firewall](https://pe.wordpress.org/plugins/tags/firewall/)
   [security](https://pe.wordpress.org/plugins/tags/security/)
 *  [Advanced View](https://pe.wordpress.org/plugins/botblocker-security/advanced/)

## Ratings

 5 out of 5 stars.

 *  [  10 5-star reviews     ](https://wordpress.org/support/plugin/botblocker-security/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/botblocker-security/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/botblocker-security/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/botblocker-security/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/botblocker-security/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/botblocker-security/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/botblocker-security/reviews/)

## Contributors

 *   [ Yevhen Leonidov ](https://profiles.wordpress.org/globusstudio/)
 *   [ Andrii Lukashevych ](https://profiles.wordpress.org/alukashevych/)
 *   [ Aleksander Kinakh ](https://profiles.wordpress.org/alexandrkinakh/)

## Support

Issues resolved in last two months:

     4 out of 5

 [View support forum](https://wordpress.org/support/plugin/botblocker-security/)