HumanGate

HumanGate protects your WordPress site from AI training crawlers, search engine bots, and unauthorized scraping bots. ), and deter large-scale bot extraction with lightweight JavaScript challenges—all without CAPTCHAs or heavy databases.

Perfect for:

* Journalists protecting sensitive content

* Activists and independent creators

* Nonprofits and whistleblower support projects

* Anyone wanting to opt out of AI training data collection

Core Features:

• Block Search Engines – Clear, top-level setting to block all search engines (Google, Bing, etc.) via noindex/nofollow meta tags

• Global AI Refusal – Adds AI-specific meta tags, HTTP headers (X-AI-Training), and robots.txt rules to refuse AI training crawlers

• Active Enforcement Modes – Choose from Signals Only (default), Challenge Mode (JS verification), or Block Mode (403 Forbidden) for AI crawlers and other bots

• Bot Challenge System – Automatically detects suspicious bot traffic patterns (burst traffic, sequential traversal, deep-link access) and serves lightweight JavaScript challenges to all bots—not just AI crawlers

• Emergency Lockdown – One-click site lockdown with HTTP 451 responses and optional login-only access

• SEO Plugin Compatible – Works seamlessly with Yoast SEO, Rank Math, All in One SEO, and other SEO plugins

• Privacy-Focused Stats – Lightweight telemetry using WordPress transients (no database bloat, no IP storage)

• Performance Optimized – DNS lookup caching and user agent pattern caching for faster response times

• Whitelist Support – IP address and user agent whitelists to bypass blocking for trusted sources

How It Works:

-

) using noindex/nofollow meta tags. This is a separate, clear setting at the top of the plugin configuration.

-

) not to train on your content. This works independently from search engine blocking.

-

Active Enforcement – Optionally block or challenge bots at the HTTP level:

• Signals Only (default): Sends refusal signals only

• Challenge Mode: Requires JavaScript execution verification for all bots

• Block Mode: Returns 403 Forbidden to AI crawlers and other unauthorized bots

-

Selective Friction – Automatically detects bot scraping patterns and serves invisible JavaScript challenges to any suspicious traffic:

• Burst traffic detection (12+ pages in 5 seconds) – catches all bots, not just AI crawlers

• Sequential traversal detection (machine-like pagination)

• Deep-link access detection (direct access to old content)

• Auto-completing challenges (no user interaction required)

• Works against all types of bots: AI training crawlers, scrapers, data harvesters, etc.

-

Emergency Lockdown – Instantly lock down your site with one toggle, returning HTTP 451 responses with optional login-only access.

Design Philosophy:

HumanGate doesn’t try to perfectly identify machines. Instead, it makes large-scale extraction economically inefficient while keeping the experience invisible to 99% of real human users. No CAPTCHAs, no heavy databases, just lightweight protection.

Development

com/NomadBuilder/HumanGate