WebDecoy Bot Detection

Audited at release

v2.2.3WordPress PluginAudited Today

Zero-config bot, spam, and carding protection. Works instantly on activation, with no account, API key, or external connections.

HIGH

Total Findings

221

Security Grade

Coding Score

100/100

Security Findings

221

Critical0

High9

Medium38

Low3

Info171

Executive Summary

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformancedatabaseType SafetyWordPress Compatibilityhook-wiringInternationalization

Plugin Info

Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![WebDecoy Bot Detection security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/webdecoy)](https://wphealthkit.com/directory/webdecoy)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformancedatabaseType SafetyWordPress Compatibilityhook-wiringInternationalization