RabbitproofBack to Rabbitproof
WordPress Plugin

Stop bots and spam on your WordPress website.

Runs inside WordPress, on your own server. Fake sign-ups, junk comments, spam messages and fake orders are refused before they reach you. Nothing for your visitors to click.

Then open Rabbitproof in WordPress and press Connect.

The Rabbitproof bunny knight

What it does

Each visitor is checked quietly in the background while they read your page. When a form is sent, spam bots are refused and real visitors go straight through.

BROWSERS

Automated browser detection

Spots automated and headless browsers, the kind spam bots run.

CONNECTIONS

Multi-connection device detection

Spots the same machine arriving from different internet connections within seconds.

REPEATS

Repeat offender blocking

A connection blocked twice in a day is kept out for 24 hours.

PROXIES

Proxy and VPN detection

Spots bots that come through home connections, proxies and VPNs.

NETWORK

Shared bot blocklist

Machines already caught as bots on other websites Rabbitproof protects are blocked on yours too.

PASS

Returning visitor pass

A real visitor is not checked again for 7 days. You can make it 1 or 30.

FORMS

Form spam protection

Works with the forms you already have. Nothing a visitor types is ever sent to Rabbitproof.

DIRECT

Direct POST protection

Every send is checked on your server, so bots cannot skip the page and post straight to your form.

FILES

Scanner and private file blocking

Bots hunting for the files that hold your settings, passwords, backups and database copies are turned away, and those files are kept off the internet.

What it protects

Spam bots can't send these forms. Real visitors notice nothing.

Screenshots

How it connects

Install it like any other plugin. No change to your domain, no code to paste.

  1. Install the pluginDownload it and upload it in WordPress, like any other plugin.
  2. Press Connect to RabbitproofSign in, or make an account. Your website is added and verified for you.
  3. That's itRabbitproof starts in Log only mode, so you can see what it finds before you turn on blocking.

What it is, and what it is not

It is

  • Spam bot protection for the forms on your WordPress website, decided on your own server. It also turns away bots hunting for your private files.
  • Safe for your messages: a refused message is never lost. Comments go to your Spam folder; other messages are kept on your website for 30 days, where you can read them and unblock the sender.

It is not

  • In front of every page. Bots can still read your pages; to check every page, use Bot Management for WordPress.
  • A filter for spam a person types in by hand. Keep your spam filter for that.
WordPress Plugin
A$5a month · stop any time

No payment method needed to start. Your first 5,000 requests aren't billed.

Requests included
25,000each month
Extra requests
A$2per 25,000

Questions

Will my visitors notice?

No. The check runs in the background while they read your page. There are no puzzles or ticks.

What happens if Rabbitproof is down?

Forms go through as normal and your website keeps working. The plugin shows Can't reach Rabbitproof until it's back.

Does it work with page caching?

Yes. The check runs in the visitor's browser, so cached pages are fine.

What if a real person is refused?

Unblock them on the plugin's Requests tab, and they go straight through for 7 days. Their message is there to read.