Slover Shield
Keep the scrapers out. Let the customers in.
A WordPress security plugin that stops scrapers, site copy tools and fake search bots from lifting your theme, plugins and content, while real customers, Google, Bing and AI search crawlers pass straight through. It runs inside WordPress, so it works on any host with no Cloudflare account.
- Works with
- WordPress, any host
- Needs
- No Cloudflare or outside proxy
- Speed cost
- Counters live in memory
- Running on
- pitchroofing.com
Why it exists
A custom WordPress theme and a set of in house plugins are real work, and anyone with a copy tool can try to lift them in minutes. Most bot blockers either sit on a proxy service or throw a puzzle at every visitor. Slover Shield runs inside WordPress, judges each request on its own evidence, and only asks for a browser check when a visitor already looks like a bot.
Search matters as much as security, so the good bots are verified by the address lists their owners publish, not by the name they claim. Googlebot gets in. Something pretending to be Googlebot does not.
What it does
Verified search bots
Google, Bing, Apple and AI search crawlers are checked against their published address lists.
AI preferences in robots.txt
Search and AI answers allowed, model training declined, written for you.
Copy tool blocking
Site rippers and bulk downloaders are turned away by name and by behavior.
Trap link
A hidden link only a bot would follow, with an automatic ban for anything that does.
Speed limits
Request limits per visitor, with short time outs for bursts.
Suspicion score
Cloud hosting, missing browser headers and odd patterns add up to a one second browser check.
API lockdown
Hides user names and closes the public content API to strangers.
Fingerprint cleanup
Removes WordPress generator tags and version numbers that tell scanners what to try.
Tracking codes
Each page carries a sealed code that traces a copied page back to the visit.
Scanner catcher
Visitors who rack up 404s probing for weak spots get banned.
Address lookups
Check any banned address against AbuseIPDB from the dashboard.
Daily digest
A morning email with what was blocked and why.
Results
- 2
- Scrapers caught by the trap link on its first night live
- 1 second
- Browser check, shown only to visitors that already look automated
Built to fail open
A security plugin should never be the reason a site goes down. Slover Shield keeps its counters in the object cache, loads fixed address lists that refresh once a day, and steps aside if anything it depends on is missing. Logged in users, trusted services and the site's own apps are never challenged, and one setting turns the whole thing off in an emergency.
Questions
Will Slover Shield block Google or Bing?
No. Real search engine crawlers are verified against the address lists Google, Bing and Apple publish, so they pass. Bots that only pretend to be Googlebot are stopped.
Does it block AI search engines?
No. AI search crawlers that cite and link to your pages are allowed. Crawlers that only collect training data are turned away, and robots.txt states that preference.
Will my customers see a challenge page?
Not on a normal visit. The one second browser check only appears when a request already looks automated, such as a headless browser on a cloud server.
Do I need Cloudflare to use it?
No. Slover Shield runs inside WordPress and works on any host.
