RabbitproofBack to Rabbitproof

Pricing

Every product's price, the requests it includes, what counts as a request, and how billing, alerts and stopping work. The full agreement is in the Terms.

Last updated 27 October 2026

WordPress Plugin

More about the WordPress Plugin
Each monthA$5per website
Requests included25,000each month
Extra requestsA$2per 25,000

In Australian dollars. No GST is charged: Rabbitproof is not registered for GST.

Starting

  • The plugin starts straight away. No payment method is needed.
  • Your website's first 5,000 requests aren't billed. Then checking pauses until a payment method is set up.
  • Once for each website address.

What counts

  • Each visitor checked. A real visitor is checked once, then not again while they're remembered (7 days unless you change it).
  • Each form sent to your website: contact forms, comments, sign-ins, sign-ups and checkout.
  • Search engines and other known bots that load your pages.
  • Scanners the plugin turns away are not counted.
For example, a small business website in a month
About 1,800 people visit, some more than once2,500 checks
Bots that load your pages400
Forms sent, spam included300
Search engines200
Requests usedabout 3,400 of 25,000

Billing

  • Charged in advance each month, on the day of the month billing started.
  • Unused requests don't carry over.
  • Extra requests are charged for the exact number used, rounded to the cent, on the next bill, or when the website is removed or it is stopped. There is no limit on them.
  • Payments are taken by Stripe.

Alerts

  • We can email you when 85% of the included requests are used, when all of them are used, and when extra requests in a month pass an amount you choose.
  • Alerts don't stop or limit anything.

Changes and stopping

  • Move to Bot Management for WordPress at any time. It starts at once, charged for the days left until your next bill.
  • Stop at any time. It ends when the month you have paid for ends.
  • We don't refund part of a month.

Failed payments

  • If a payment fails, Stripe tries the card again. If it still can't be paid, it stops and nothing is checked.

How it connects

  • The Rabbitproof WordPress plugin, installed on your website and connected to your Rabbitproof account. Forms are checked on your own server.

How it checks

  • Automated browser detection, multi-connection device detection, repeat offender blocking, proxy and VPN detection, the shared bot blocklist, the returning visitor pass, form spam protection, direct POST protection and scanner blocking. What these use is set out in our privacy policy.

Bot and Spam Protection

More about Bot and Spam Protection
Each monthA$14per website
Requests included100,000each month
Extra requestsA$4per 100,000

In Australian dollars. No GST is charged: Rabbitproof is not registered for GST.

Starting

  • You set up a payment method first.
  • Billing starts once your website has used its first 10,000 requests.
  • Once for each website address.

What counts

  • Each visitor checked. A real visitor is checked once, then not again while they're remembered (7 days unless you change it).
  • On PHP hosting, each form the installed file checks.
  • Search engines and other known bots that load your pages.
  • Scanners turned away are not counted.
For example, a small business website in a month
About 1,800 people visit, some more than once2,500 checks
Bots that load your pages400
Forms checked on PHP hosting, spam included300
Search engines200
Requests usedabout 3,400 of 100,000

Billing

  • Charged in advance each month, on the day of the month billing started.
  • Unused requests don't carry over.
  • Extra requests are charged for the exact number used, rounded to the cent, on the next bill, or when the website is removed or it is stopped. There is no limit on them.
  • Payments are taken by Stripe.

Alerts

  • We can email you when 85% of the included requests are used, when all of them are used, and when extra requests in a month pass an amount you choose.
  • Alerts don't stop or limit anything.

Changes and stopping

  • Move to Bot Management at any time. It starts at once, charged for the days left until your next bill.
  • Stop at any time. It ends when the month you have paid for ends.
  • We don't refund part of a month.

Failed payments

  • If a payment fails, Stripe tries the card again. If it still can't be paid, it stops and nothing is checked.

How it connects

  • One line of code from your dashboard, placed in your website's pages. Forms are checked while visitors read the page.

How it checks

  • Automated browser detection, multi-connection device detection, repeat offender blocking, proxy and VPN detection, the shared bot blocklist, the returning visitor pass, form spam protection, brute force login protection, fake account protection, direct POST protection, scanner and private file blocking, and bot location reporting. What these use is set out in our privacy policy.

Bot Management

More about Bot Management
Each monthA$39per website
Requests included1,000,000each month
Extra requestsA$10per 1,000,000

In Australian dollars. No GST is charged: Rabbitproof is not registered for GST.

Starting

  • You set up a payment method first.
  • Billing starts once your website has used its first 50,000 requests.
  • Once for each website address.

What counts

  • Each request that goes through Rabbitproof: every page, picture, script, file and form.
  • One page view usually makes many requests.
For example, a small business website in a month
5,000 page views, about 30 files each150,000
Requests usedabout 150,000 of 1,000,000

Billing

  • Charged in advance each month, on the day of the month billing started.
  • Unused requests don't carry over.
  • Extra requests are charged for the exact number used, rounded to the cent, on the next bill, or when the website is removed or it is stopped. There is no limit on them.
  • Payments are taken by Stripe.

Alerts

  • We can email you when 85% of the included requests are used, when all of them are used, and when extra requests in a month pass an amount you choose.
  • Alerts don't stop or limit anything.

Changes and stopping

  • Move a website to Bot and Spam Protection, or a WordPress website to the WordPress Plugin, at any time: when the month you have paid for ends, or straight away, with the rest of that month not refunded.
  • Stop at any time. It ends when the month you have paid for ends.
  • We don't refund part of a month.

Failed payments

  • If a payment fails, Stripe tries the card again. If it still can't be paid, it stops and nothing is checked.

How it connects

  • Two records where you manage your domain. Visitors reach your website through Rabbitproof; your website stays on your own server.

How it checks

  • Automated browser detection, multi-connection device detection, repeat offender blocking, proxy and VPN detection, the shared bot blocklist, the returning visitor pass and form spam protection, bot location reporting, every page protection, page rules, verified bot rules, geoblocking, origin protection, direct POST protection, scanner blocking, content scraping protection and honeypot protection. What these use is set out in our privacy policy.