WordPress Bot Protection

Stop bots before they
see a single page

Cloudflare-style reCAPTCHA gate for WordPress. Whole-site protection, login security, and form spam blocking — all in one plugin.

Whole-site gate — not just forms
Login page protection
Form spam blocking
IP blocklist + rate limiter
Brute force login lockout
Install in 60 seconds

Simple, transparent pricing

All plans include every feature. License key delivered instantly by email.

Starter
Perfect for personal sites and small blogs
$7/year
Billed annually
  • 10,000 verifications / month
  • 1 domain
  • Whole-site reCAPTCHA gate
  • Login page gate protection
  • Brute force login lockout
  • Form spam protection
  • IP blocklist + rate limiter
  • Bot whitelist
  • Email support
Purchase
Agency
For web agencies managing multiple client sites
$49/year
Billed annually
  • Unlimited verifications / month
  • Unlimited domains
  • Whole-site reCAPTCHA gate
  • Login page gate protection
  • Brute force login lockout
  • Form spam protection
  • IP blocklist + rate limiter
  • Bot whitelist
  • Priority email support
Purchase

Everything included in every plan

No add-ons. No hidden features. All plans get the full plugin.

🛡

Whole-site reCAPTCHA gate

Every visitor is silently scored by reCAPTCHA v3 before they see any page. Bots never get through.

🔐

Login page protection

The gate runs on wp-login.php before the login form is shown — blocking bots before they even attempt to log in.

🔒

Brute force lockout

Tracks failed login attempts per IP. Temporary lockout after N failures, permanent ban after repeated lockouts.

📋

Form spam protection

Covers WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Contact Form 7, and WooCommerce checkout.

Hybrid cookie verification

Visitors who already passed the gate are remembered. Forms and login are verified instantly with zero extra API quota used.

🤖

Bot whitelist

Googlebot, Bingbot, and other known good crawlers are automatically whitelisted — your SEO is never affected.

🚫

IP blocklist + rate limiter

Block individual IPs or ranges. Automatic rate limiting prevents abuse before it reaches your WordPress site.

🌑

Cloudflare-style dark gate UI

A clean, professional black gate page with reCAPTCHA v3 silent scoring and v2 checkbox fallback for borderline cases.

Up and running in 4 steps

1

Choose your plan

Click Purchase on any plan. Your license key is emailed to you instantly after payment.

2

Install the plugin

Upload the zip to WordPress → Plugins → Add New. Takes less than 60 seconds.

3

Activate and submit keys

Enter your license key → click Activate. Then log in to your account to submit your own Google reCAPTCHA keys.

4

Bots are blocked

Every visitor is silently scored. Bots never see your content, reach your login page, or submit your forms.

Frequently asked questions

Do I need a Google reCAPTCHA account?
Yes — you create your own free Google reCAPTCHA keys (takes about 2 minutes) and submit them in your account dashboard. This means your keys are registered to your own domain and you are never dependent on anyone else's quota.
Which form plugins are supported?
WPForms, Gravity Forms, Ninja Forms, Fluent Forms, Formidable Forms, Contact Form 7, and WooCommerce checkout are all supported out of the box. Each form is verified using a hybrid cookie + reCAPTCHA check so existing verified visitors are never challenged twice.
Does it protect the WordPress login page?
Yes. The gate runs on wp-login.php before the login form is shown. Any bot or automated tool that tries to reach the login page must pass the reCAPTCHA gate first. On top of that, brute force protection locks out IPs after repeated failed login attempts.
What happens to real visitors?
Real humans with a score ≥ 0.5 are verified silently in about 1 second and pass through automatically — they never need to solve a puzzle. A verified session cookie is set so the visitor is not re-challenged on subsequent pages or form submissions.
What is a verification?
One verification = one new visitor session. After a visitor passes the gate their session is remembered — they are not re-checked on every page or every form submission. A typical site uses far fewer verifications than the monthly plan limit.
Will it affect my SEO?
No. Googlebot, Bingbot, and all other major search engine crawlers are automatically detected and whitelisted. They never see the gate page and index your content normally.
What happens when my license expires?
The gate stops working and visitors pass through without verification. You will receive a reminder email before expiry. Simply renew your license to restore full protection.
How do I get support?
Email us at support@sadisi.org. We typically respond within 24 hours.