Install in three steps
- 1
Create a free account and add your site
You get a site key immediately. The Free plan covers 10,000 visits a month.
- 2
Paste the script into your theme header
Appearance → Theme File Editor → header.php, or any header-scripts plugin. That alone gives you the full dashboard: bots vs humans, crawler names, behaviour and AI visibility.
- 3
Add the plugin file for blocking and form protection
Download botlens.php from your dashboard, upload it to wp-content/plugins, activate, and paste your site key. Blocking and form verification now run server-side, before WordPress renders anything.
What you get
Every bot, named
GPTBot, ClaudeBot, PerplexityBot, SEO crawlers, scrapers and scanners — with the pages each one reads.
Form spam stopped
Honeypot, timing check and signed token injected into every WordPress form automatically.
Login probing blocked
Credential-stuffing traffic on wp-login.php is throttled or blocked at request level.
AI readability score
See what AI assistants can actually read from your posts and pages, and what to fix.
WordPress questions
Does it slow down my WordPress site?+
No. The tracking script is 4.2kb and loads asynchronously, and the PHP checks run in microseconds against a cached decision.
Will it block Google or AI crawlers?+
No. Search and AI crawlers are allow-listed by default — you only ever block traffic classified as spam or fraud, and every rule is overridable.
Does it work with Contact Form 7, WPForms, Gravity Forms and Elementor?+
Yes. Verification happens at request level rather than per form plugin, so every form on the site is covered.
Do I need a plugin at all?+
Not for measurement — the script alone gives you the full dashboard. The plugin adds server-side blocking and form protection.
Also read: How to stop bots submitting your forms on WordPress and Webflow.