Artiman Guard

Artiman Guard protects WordPress and WooCommerce forms without sending CAPTCHA data or security reports to an external service.

Protection layers include:

• A required mathematical challenge, with optional local browser proof-of-work as an additional risk signal.
• One-time signed challenges, dynamic honeypots and form timing checks.
• Local rate limiting and a managed IP blocklist.
• Secure Cloudflare visitor-IP extraction that trusts headers only from official Cloudflare networks.
• Reverse-and-forward DNS verification for Google and Bing crawlers.
• Aggregated attack events, daily trends, unique attack groups and configurable database caps.
• Verified Cloudflare visitor IP handling without trusting spoofed forwarding headers.
• Reverse and forward DNS verification for Googlebot and Bingbot.
• Route-family rate limiting and pagination/filter crawl-trap detection.
• Aggregated attack events, database row caps and 30-day comparisons.
• Daily and 30-day email security summaries.
• Registration firewall, one-time registration permits and account quarantine.
• Spam-username detection and registration-source monitoring.
• Internal/external link classification for comments, product reviews and form submissions.
• Writing-system checks with automatic site-language defaults and administrator overrides.
• Content-risk scoring for repetition, advertising language, gibberish, disposable email, suspicious domains, invalid phone numbers and duplicate submissions.
• Block, quarantine, suspicious and allow-with-flag decisions.
• Review queues for comments, Elementor Pro Forms and Gravity Forms.
• 404 scanner detection, sensitive-path protection and repeated-request blocking.
• Route-family rate limiting for abusive pagination and filter crawl traps.
• Internal broken-link reports, redirect suggestions and crawl-budget reports.
• Administrator feedback accuracy, URL action recommendations and optional email summaries.
• Soft-404 and suspicious-200 reporting.
• Internal-search and WooCommerce-filter noindex protection.
• WordPress login, registration, lost-password and comment protection.
• WooCommerce login, registration and product-review protection.
• Dedicated Elementor Pro Forms and Gravity Forms fields.
• A local Security Center for suspicious events and managed IP blocks.
• Persian translation and support for WordPress language packs.
• A bilingual in-dashboard guide for secure field setup, integration checks and spam troubleshooting.

Artiman Guard is designed to cooperate with WordPress Core, WooCommerce, Yoast SEO, Rank Math, AIOSEO and SEOPress. SEO directives owned by an active SEO plugin are not replaced.

AI discovery access is controlled separately from model-training access. The optional llms.txt endpoint is only a fallback for sites without a supported SEO plugin or physical llms.txt file; it lists only published public content and does not replace normal sitemaps, structured data or high-quality page content.

Developer website: https://artimanweb.com/

Privacy

Artiman Guard does not send visitor data outside the website. When local reports are enabled, it stores the form context, result, reason, risk score, time, salted technical identifiers, and the IP address for suspicious or blocked activity. Routine successful checks are not stored. Security reports and temporary blocks expire automatically. A permanent IP block remains until a manager releases it.

The plugin registers WordPress personal-data exporter and eraser callbacks for locally stored security data.