AI-Assisted Security Monitoring for WordPress and WooCommerce

WPStore+ AI Security Guard is a security monitoring and threat response plugin built for WordPress and WooCommerce websites. It helps site owners detect suspicious behavior, monitor automated bot activity, identify high-risk requests, and respond to critical threats before they become serious problems.

Instead of relying only on simple IP blocking, WPStore+ AI Security Guard uses a local risk score engine to evaluate suspicious requests based on behavior, request path, threat type, repeated activity, scanner patterns, honeypot hits, and attack bursts.

The plugin is designed to help you understand what is happening on your website in real time.

Detect Suspicious Behavior Before It Becomes a Bigger Problem

WPStore+ AI Security Guard monitors common suspicious activities such as:

- Sensitive file probes
- .env and wp-config.php access attempts
- Backup and database file probes
- Random PHP scanner requests
- WordPress plugin and theme fingerprinting
- XML-RPC probes
- REST API user enumeration attempts
- SQL injection and XSS-like patterns
- Path traversal attempts
- Suspicious 404 bursts
- Brute-force style login behavior
- WooCommerce-related suspicious traffic

Live Threat Events

The Live Threat Events screen allows administrators to monitor suspicious traffic while the page is open. The event table can automatically refresh, making it easier to watch repeated scanner activity or active bot behavior without manually refreshing the browser.

This is especially useful when your website is receiving repeated probes from the same IP address or suspicious automated traffic.

Smart Honeypot Detection

WPStore+ AI Security Guard includes smart honeypot detection for suspicious paths that normal visitors should not access. When a bot attempts to access honeypot-style paths or sensitive-looking files, the plugin can identify the behavior as high risk.

Examples include:

/.env
/wp-config.php
/backup.zip
/database.sql
/wpstore-asg-honeypot-test
/wp-content/plugins/*/readme.txt

The plugin assigns a risk score to suspicious events so administrators can quickly understand the severity of each request.

Example severity levels:

Low
Medium
High
Critical

Temporary IP Blocking

With a valid license, WPStore+ AI Security Guard can temporarily block IP addresses that trigger critical threat behavior or repeated high-risk activity.

The temporary block system includes:

- Auto temporary block
- Manual block action
- Block reason
- Expiry time
- Blocked IPs page
- Manual unblock option
- Allowlist protection

Burst Escalation and Scanner Detection

Many bots do not attack with only one request. They often scan many random files in a short time, such as:

/mini.php
/wp-curl-file.php
/geforce.php
/obfuscate.php
/bless24.php

LINE Critical Threat Alerts

WPStore+ AI Security Guard can send critical security alerts through LINE Messaging API. This allows site owners or administrators to receive important security notifications quickly.

LINE alerts can include:

- Site URL
- Severity
- Threat type
- Risk score
- IP address
- Request path
- Action taken
- Event time

WooCommerce and WordPress Safe Compatibility

Security plugins must be careful not to interrupt legitimate website functions. WPStore+ AI Security Guard includes compatibility safeguards for important WordPress and WooCommerce flows.

Compatibility protection includes:

- WooCommerce checkout safety
- Cart and My Account safety
- REST API safe mode
- admin-ajax safe mode
- Sitemap and robots.txt safe mode
- Webhook and payment callback safe mode
- Search engine crawler safe handling

Reports and Product Readiness

The plugin includes reporting tools to help administrators review website security activity and prepare support information when needed.

Reports include:

- Daily security summary
- 7-day security summary
- 30-day security summary
- Recommended next actions
- Product readiness checklist
- Downloadable support report
- Masked license diagnostics

WPStore+ AI Security Guard includes a license feature gate for commercial usage.

Basic monitoring remains available without a license, while advanced protection features require a valid license.

Free / basic mode includes:

- Dashboard
- Basic threat events
- Risk score
- Settings
- System status
- License page
- Basic reports

- Smart honeypot response
- Auto temporary block
- Manual block IP action
- LINE critical alerts
- Live threat events auto-refresh
- Burst escalation
- Advanced reports
- Full feature gate unlock

WPStore+ AI Security Guard is designed to help WordPress and WooCommerce site owners understand suspicious traffic, identify automated probes, monitor real-time events, and respond to high-risk activity with safer, controlled protection layers.

It is not a promise that any website can be protected from every possible attack. Instead, it provides practical security visibility, risk-based monitoring, controlled response tools, and critical alerts to help website owners react faster and make better security decisions.

Key Features

- Local threat event logging
- Risk score engine
- Severity levels: Low, Medium, High, Critical
- Live Threat Events with auto-refresh
- Smart honeypot detection
- Sensitive file probe detection
- Random PHP scanner detection
- Suspicious 404 burst detection
- Burst escalation per IP address
- Auto temporary IP blocking
- Manual block and unblock tools
- IP allowlist support
- LINE Critical Threat Alerts
- Alert cooldown protection
- Attack burst alert support
- WooCommerce safe compatibility
- WordPress REST API safe mode
- admin-ajax safe mode
- Sitemap and crawler safe mode
- Webhook and payment callback safe mode
- Daily, 7-day, and 30-day reports
- Downloadable support report
- License integration
- License feature gate
- Commercial admin UI

Built to help WordPress site owners detect suspicious behavior earlier, monitor automated threats in real time, and respond to high-risk activity with safer protection tools.