Self-hosted AI traffic control for WordPress: see which AI bots are really who they say they are, what each one takes versus the visitors it sends back, and enforce one policy across robots.txt, AI licensing signals and your server. No account, no monthly fee, no data leaves your site.

What it does

• Verified bot identity: official vendor IP lists
• Web Bot Auth signature verification (RFC 9421, Ed25519)
• Forward-confirmed reverse DNS for search engines + spoofed-bot blocking
• Bot registry: 28 AI crawlers/agents + 6 search engines + custom user agents
• Intent policies (Search / AI search / AI agents / AI training) with per-bot overrides
• Policy presets: Get cited block training (default), Block all AI, Monitor only, Charge training and agents
• Site-wide enforcement: HTTP 403 block, per-IP and per-bot 429 rate limits
• Activity log + live feed

You need

• WordPress 6.6 or newer
• PHP 7.4 or newer
• Tested: PHP 7.4.33 and PHP 8.4.25 on WordPress Playground with SQLite (WP 'latest'; readme claims Tested up to 7.1)
• MySQL / MariaDB: NOT tested (SQLite only so far)
• PHP sodium extension for Web Bot Auth verification (fails open to IP/rDNS if missing)