AgentShield AI Defense - is an advanced WordPress security plugin designed to protect your site from aggressive AI scrapers, content theft, and indirect prompt injection attacks.
Features Advanced Bot Blocking - Detects and immediately blocks known AI crawlers (GPTBot, Claude-Web, CCBot, anthropic-ai, and more) at the User-Agent level with a 403 response.
IP-Based Rate Limiting - Catches bots that disguise their identity by analyzing request frequency at the IP level. Uses a dedicated database table with a configurable limit and time window. Returns a 429 Too Many Requests response when the threshold is exceeded.
Smart Tarpit (Honeypot) - Injects an invisible link into every page that is hidden from human visitors but enticing to AI crawlers. When a bot follows the link, it is trapped in a slow-drip response that streams dummy data with deliberate delays , wasting the bot's time and resources.
Content Cleaner - Strips invisible Unicode characters (zero-width spaces, soft hyphens, word joiners, etc.) embedded in post content and comments. These characters are commonly used in indirect prompt injection attacks to manipulate AI language models that process your content.
Dynamic Content Watermark - Appends a hidden, CSS-obfuscated digital signature to every piece of content. Unlike simple display:none spans, the watermark class name is derived from a hash of your site URL, making it harder to strip in bulk. Each page gets a unique, stable SHA-256 content ID based on the post ID — not a random value — so scraped content can be reliably traced back to its source.
Live Statistics DashboardMonitor - blocked and trapped bots in real time from the WordPress admin panel. Includes a one-click stats reset.