{"id":308516,"date":"2026-06-24T01:36:20","date_gmt":"2026-06-24T01:36:20","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/pureguard-performance\/"},"modified":"2026-06-24T01:35:43","modified_gmt":"2026-06-24T01:35:43","slug":"pureguard-performance","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/pureguard-performance\/","author":11293349,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"5.0.7","stable_tag":"5.0.7","tested":"7.0","requires":"5.6","requires_php":"7.4","requires_plugins":null,"header_name":"PureGuard \u2014 Bot Protection & Performance","header_author":"PureGuard Team","header_description":"Three-tier traffic protection for WordPress: WAF bot blocking via 18-layer detection engine, JS challenge page for filtered traffic, and post-click engagement intelligence per traffic zone.","assets_banners_color":"","last_updated":"2026-06-24 01:35:43","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/pureguard.io\/plugins","header_author_uri":"https:\/\/pureguard.io","rating":0,"author_block_rating":0,"active_installs":0,"downloads":27,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","faq","changelog"],"tags":{"5.0.7":{"tag":"5.0.7","author":"chanmyayaung","date":"2026-06-24 01:35:43"}},"upgrade_notice":{"5.0.4":"<p>Simpler and safer: one security mode (Off \/ Medium \/ High) replaces the old multi-dropdown setup. Your previous settings are migrated automatically. Review Settings \u2192 PureGuard \u2192 Security Mode after updating.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3583936,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3583936,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["5.0.7"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[262246],"plugin_tags":[22770,1174,600,268633,18199],"plugin_category":[54],"plugin_contributors":[268634],"plugin_business_model":[],"class_list":["post-308516","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-bot-detection","plugin_tags-firewall","plugin_tags-security","plugin_tags-traffic-quality","plugin_tags-waf","plugin_category-security-and-spam-protection","plugin_contributors-chanmyayaung","plugin_committers-chanmyayaung"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/pureguard-performance\/assets\/icon-128x128.png?rev=3583936","icon_2x":"https:\/\/ps.w.org\/pureguard-performance\/assets\/icon-256x256.png?rev=3583936","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>PureGuard is a simple, safe bot-protection plugin for WordPress. You pick <strong>one<\/strong> of three security modes \u2014 the plugin configures everything else for you. No confusing combinations, no accidental blocking.<\/p>\n\n<p>Every visitor is sorted into one of three lanes:<\/p>\n\n<ul>\n<li><strong>Humans<\/strong> \u2014 proven real visitors (always allowed).<\/li>\n<li><strong>Suspicious<\/strong> \u2014 not clearly a bot, but not clearly human either.<\/li>\n<li><strong>Bots<\/strong> \u2014 confirmed bots.<\/li>\n<\/ul>\n\n<p><strong>The three modes<\/strong><\/p>\n\n<ul>\n<li><strong>Off (Log only)<\/strong> \u2014 Nothing is ever blocked or challenged. The plugin only observes and reports. Use this when your traffic is already filtered upstream.<\/li>\n<li><strong>Medium (recommended)<\/strong> \u2014 Confirmed bots are blocked. Humans and Suspicious visitors both pass freely. No challenge page.<\/li>\n<li><strong>High<\/strong> \u2014 Confirmed bots are blocked and Suspicious visitors must pass a quick JavaScript browser check.<\/li>\n<\/ul>\n\n<p><strong>Multilingual challenge page<\/strong><\/p>\n\n<p>The High-mode challenge page automatically detects the visitor's browser language and shows localized text. English, Thai, Bahasa Indonesia, Vietnamese, and Burmese (Myanmar) are built in, and every line is editable from the settings page.<\/p>\n\n<p><strong>Engagement intelligence<\/strong><\/p>\n\n<p>Optionally measures anonymous time-on-page and scroll signals so PureGuard can score traffic quality per site. No personal data is collected.<\/p>\n\n<p><strong>Stats you can see<\/strong><\/p>\n\n<p>A Stats tab and a dashboard widget show exactly what the plugin is doing: Humans \/ Suspicious \/ Bots counts, API checks, and challenge pass rate. No silent blocking.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"will%20this%20block%20my%20real%20visitors%3F\"><h3>Will this block my real visitors?<\/h3><\/dt>\n<dd><p>In Off mode, never. In Medium mode, only confirmed bots. In High mode, uncertain visitors may briefly see a JavaScript challenge \u2014 do not use High mode for background\/popunder traffic.<\/p><\/dd>\n<dt id=\"do%20i%20need%20a%20pureguard%20account%3F\"><h3>Do I need a PureGuard account?<\/h3><\/dt>\n<dd><p>Yes. Add your PureGuard API key under Settings \u2192 PureGuard. Get one at https:\/\/pureguard.io.<\/p><\/dd>\n<dt id=\"does%20it%20slow%20down%20my%20site%3F\"><h3>Does it slow down my site?<\/h3><\/dt>\n<dd><p>Verdicts are cached per visitor (default 1 hour), so the API is called at most once per visitor per cache window. Logged-in users and search engines are skipped.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>5.0.4<\/h4>\n\n<ul>\n<li>NEW: \"Allow AI training crawlers\" toggle (off by default) \u2014 block or allow GPTBot, ClaudeBot, CCBot, PerplexityBot, etc. Search engines and social crawlers are always allowed.<\/li>\n<li>CHANGED: \"Allow VPN\" now applies to VPNs only \u2014 open \/ datacenter \/ TOR proxies stay blocked.<\/li>\n<li>IMPROVED: Plain-language labels (Humans \/ Suspicious \/ Bots) and clearer mode descriptions throughout the settings and stats.<\/li>\n<\/ul>\n\n<h4>5.0.3<\/h4>\n\n<ul>\n<li>IMPROVED: The plugin now forwards the visitor's browser headers (Sec-Fetch, client-hints, language) to the detection API, so trust scoring reflects the real browser context instead of treating every visitor as header-less.<\/li>\n<\/ul>\n\n<h4>5.0.2<\/h4>\n\n<ul>\n<li>NEW: \"Allow VPN \/ proxy visitors\" toggle \u2014 treat people browsing via a VPN or proxy as human instead of bots.<\/li>\n<\/ul>\n\n<h4>5.0.1<\/h4>\n\n<ul>\n<li>NEW: Burmese (Myanmar) added to the built-in challenge page languages.<\/li>\n<li>CHANGED: Default trust threshold aligned to 5.5 (the standard human line) instead of 7.0; the API now flags only genuine bots as Lane C.<\/li>\n<\/ul>\n\n<h4>5.0.0<\/h4>\n\n<ul>\n<li>NEW: One simple security mode selector \u2014 Off \/ Medium \/ High \u2014 replaces the separate WAF, Silver, and Filtered action settings.<\/li>\n<li>FIX: \"Off \/ Log only\" is now guaranteed in code to never block or challenge (hard early return).<\/li>\n<li>FIX: Each site is now identified by its own domain instead of a single shared bucket, preventing one site's traffic from affecting another's reputation.<\/li>\n<li>NEW: Multilingual challenge page (English, Thai, Indonesian, Vietnamese) with auto language detection and fully editable text.<\/li>\n<li>NEW: Lane A \/ B \/ C stats in the Stats tab and dashboard widget, including total API checks.<\/li>\n<li>CHANGED: Fails open \u2014 if the detection API is unreachable, visitors are allowed through, never blocked.<\/li>\n<li>CHANGED: Settings reorganized into General, Security Mode, Challenge Page, and Stats tabs.<\/li>\n<li>Automatic one-time migration from v4 settings to the new security mode.<\/li>\n<\/ul>\n\n<h4>4.0.1<\/h4>\n\n<ul>\n<li>Compliance: moved the browser-challenge CSS\/JS out of inline tags into enqueued assets (wp_enqueue_style\/script + wp_add_inline_script) per WordPress.org review.<\/li>\n<\/ul>\n\n<h4>4.0.0<\/h4>\n\n<ul>\n<li>BREAKING: All function\/option prefixes renamed from <code>pg_<\/code> to <code>pgperf_<\/code> (4+ character prefix requirement).<\/li>\n<li>NEW: JS Challenge page for filtered traffic \u2014 SHA-256 proof-of-work + 10 browser integrity checks.<\/li>\n<li>NEW: HMAC-signed verification cookie for visitors who pass the challenge (1 hour validity).<\/li>\n<li>NEW: Challenge statistics tracking.<\/li>\n<\/ul>\n\n<h4>3.0.0<\/h4>\n\n<ul>\n<li>NEW: Three-tier traffic classification.<\/li>\n<\/ul>\n\n<h4>2.0.0<\/h4>\n\n<ul>\n<li>NEW: WAF Security layer \u2014 server-side bot blocking via PureGuard 18-layer detection engine.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Simple bot protection in three modes (Off \/ Medium \/ High), powered by PureGuard&#039;s 18-layer detection engine, with a multilingual challenge page.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/308516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=308516"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/chanmyayaung"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=308516"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=308516"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=308516"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=308516"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=308516"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=308516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}