by
Predax
5 (1 reviews)
Predax Security – VPN, Proxy, Tor, Bot Blocker & Firewall
Blocks VPNs, proxies, Tor, datacenter IPs and bad bots. Plus firewall, login protection and country blocking. Free plan, no card needed.
Predax Security ranks #62,952 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, a 5/5 rating from 1 reviews, and was last updated Oct 16, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.18.0
Current Version v1.18.0
Updated 3 weeks ago
Last Update on 16 Oct, 2026
Refreshed 1 week ago
Last Refreshed on
#3,855 of 5,058 in Security
Actively maintained
Rank
#62,952
—
No change
Active Installs
0+
-100%
KW Avg Position
31.5
—
No change
Downloads
1K
+5 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(1 reviews)
Next Milestone 10
0+
10+
35,384
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 8 more installs to reach 10+
Rank Changes
Current
#62,952
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
1 reviews
Overall
100%
5
1
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.18.0
- Last Updated
- Oct 16, 2026
- Requires WP
- 5.8+
- Tested Up To
- 7.1.4
- PHP Version
- 7.4 or higher
- Author
- Predax
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 1
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Predax Security – VPN, Proxy, Tor, Bot Blocker & Firewall
Switch off "Allow AI crawlers" in Settings → Protection → Crawler Policy. Requests coming from the IP ranges published by OpenAI (GPTBot, OAI-SearchBot, ChatGPT-User), Anthropic (ClaudeBot) and Perplexity (PerplexityBot) then receive a 403 instead of your content. Search engines and SEO crawlers have their own separate switches, so this changes nothing about how Google or Bing see your site.
robots.txt is a request that a crawler chooses to honour, and nothing enforces it. Blocking by user-agent is no better, because the user-agent is just a header any script can set to anything. Predax checks whether the request genuinely comes from an IP range the crawler's operator publishes, and blocks on that verified identity instead. Crawlers that publish no ranges at all are judged by the normal bot and risk rules.
No. The three switches are independent: blocking AI or SEO crawlers has no effect on search engines, which stay allowed — and exempt from your other category rules — unless you deliberately turn the search-engine switch off. The settings page warns you clearly if you do.
It solves a different problem — and runs happily alongside them. Scanner-based plugins like Wordfence or Solid Security focus on malware scanning and firewall rules: they look at what a request does once it reaches your site. Predax Security looks at who is connecting: it identifies anonymised and high-risk IPs (VPNs, proxies, Tor, datacenter ranges) in real time using a commercial IP intelligence database, and blocks them before they attempt anything. Many sites run Predax Security alongside a scanner-based plugin — Predax filters out the anonymous, high-risk traffic; the scanner watches what gets through.
No. API results are cached in the WordPress database for between 5 minutes and 1 hour per IP, following the lifetime the API recommends for that address. After the first check, returning visitors are served from cache with no API call.
Only if you enable VPN blocking. By default the plugin is set to monitor VPN traffic (log it but not block it). You control exactly which threat types trigger a block.
By default they see a standard WordPress error page with a 403 status code. You can enable the Custom Block Page option to show a branded page with your own message and a support link.
Yes. The plugin reads the CF-Connecting-IP header automatically when Cloudflare is detected, so the real visitor IP is used rather than the Cloudflare proxy IP.
For most small sites, yes. The free plan provides 1,000 checks per day. With 1-hour caching, this covers approximately 1,000 unique visitors per day. Returning visitors within the hour use cached results and don't count against your quota. Verified search engine crawlers don't count either. When Googlebot, Bingbot or a similar crawler visits, the check is free — so a site that is crawled heavily doesn't lose its allowance to search engines. Verification is against each search engine's own published addresses, so a bot merely claiming to be Googlebot is still counted (and still blocked if you have fake-bot protection on).
Yes. Go to Predax Security → Settings → Protection → IP Allow-list. It shows the address your site currently sees you as, with a button to add it, and you can add any single IP or CIDR range. You can also use the Allow button next to an entry in the Threat Log. Allow-listed addresses are never blocked.
