Independent WordPress Security Engineering

Defend Your WordPress Site Against AI Crawler Abuse

Voho Team builds focused security tools for modern scraping threats. Voho bot manager detects high-risk automation sessions, responds with HTTP 403, and preserves evidence-grade logs for operations and reporting.

Join Discord Get updates and support

Current Product

Voho bot manager for WordPress

Voho bot manager hardens WordPress against AI-driven crawler stacks and automated headless browsing pipelines. When suspicious automation is identified, the request is terminated with HTTP 403 and a structured intercept record is written for auditing.

Fast Enforcement

Automated request classes are denied server-side before content extraction succeeds.

Operational Visibility

Each intercept includes UTC timestamp, client IP, requested URL, and interception flag.

Admin Workflow

Dedicated admin hub with paginated history and one-click View log access.

Why It Works

Practical Mitigation for Evolving Automation

Threat-focused detection

Detects common script and headless automation user agents while preserving allowlists for major search crawlers.

WordPress-native integration

Fits into standard WordPress plugin operations with no external service dependency.

Roadmap-driven updates

Detection rules evolve iteratively as crawler behavior changes, reducing rewrite pressure over time.

Policy extension points

Exposes filters for allowlists, automation patterns, and final block decisions so teams can customize policy.

Compatibility

Deployment Notes

Cache / CDN behavior

If edge layers serve cached responses without executing WordPress/PHP, interception must be implemented at that layer.

Log storage model

Intercept data is stored in {prefix}voho_bot_manager_intercepted_log and created automatically on activation.

Independence statement

Voho bot manager is an independent security tool and is not affiliated with third-party AI browsing vendors.

FAQ

Common Questions

How does this help against OpenClaw-style AI crawlers?

The plugin blocks non-human automation paths these agents rely on, returns HTTP 403, and records each attempt to support audits and response decisions.

Will it catch every crawler on the internet?

No defensive layer can promise total coverage. Voho bot manager prioritizes high-risk automation families and expands detection as new patterns appear.

What data is stored for intercepted requests?

UTC timestamp, client IP (or first X-Forwarded-For value if present), full requested URL, and an intercepted flag.