About this plugin
EchoFilter protects your WordPress forms from bots and spam using behavioral biometrics — analyzing mouse movement, typing patterns, and timing to distinguish real users from automated submissions.
How it works:
- Install the plugin and enter your EchoFilter API key
- EchoFilter silently analyzes every visitor’s behavior
- On form submit, it scores the session (0–100 TrustScore)
- Bots get blocked. Real users get through instantly.
No CAPTCHAs. No friction. No false positives.
Compatible with:
- Contact Form 7
- WPForms
- Gravity Forms
- Elementor Forms
- Ninja Forms
- Any standard HTML form
Three protection modes:
- Block — Bot submissions are rejected with an error message (recommended)
- Flag — Bot submissions go through but with a hidden _echofilter_bot=1 field
- Log — Monitor mode: all submissions allowed, bots logged in your dashboard
External Services
com to analyze form submissions and load the detection SDK. This is the core functionality of the plugin and cannot be disabled while the plugin is active.
What is sent:
* Behavioral signals: mouse movement patterns, keystroke timing, form fill duration
* Whether a paste action was detected
* A one-way hash of the visitor’s IP address (raw IP is never stored or transmitted)
* User-agent string
What is NOT sent:
* Form field values or any user-submitted content
* Names, emails, or any personally identifiable information from your visitors
When data is sent:
Data is transmitted only when a visitor submits a form on your site and you have entered a valid API key.
External service links:
com
com/terms
com/privacy