Registration protection

Feature Registration spam protection — Stops fake account creation by scoring registrations and applying allow/hold/block logic. How it works Hooks into registration validation; checks identity heuristics (disposable domains, MX optional), velocity, and reputation; then enforces policy. How to access / enable WP Admin → AegisSpamGuard → Settings Enable registration protection (if toggle exists). Tune identity signals and trust settings. Recommended setting Recommended: Enabled with Hold for new sites. Holding suspicious registrations prevents fake accounts while avoiding accidental blocks of legitimate users during early tuning. Why you need this Admins reduce fake users, deliverability issues, and malicious activity from throwaway accounts. Additional information

Cleanup: Users scan (spam accounts cleanup)

Feature Users cleanup — Re-scores existing user accounts to identify likely spam registrations and optionally remove them. How it works Signals can include disposable domains, suspicious names, and other identity heuristics. The tool runs in safe batches. How to access / enable WP Admin → AegisSpamGuard → Cleanup Choose “Users cleanup” Run Report-only first, then apply removal if you confirm results. Recommended setting Recommended: Report-only first; delete only confirmed spam accounts. User deletion is sensitive—validate results carefully to avoid removing real customers. Why you need this Admins stop fake accounts that can harm deliverability, SEO, and store analytics. Additional information

Cleanup: Comments scan (report / spam / delete)

Feature Comments cleanup — Re-scores existing comments and lets you apply actions: Report-only, Move to Spam, or Delete. How it works The tool processes comments in batches to avoid shared-host issues. It can optionally skip logging (so cleanup doesn’t pollute live spam logs). How to access / enable WP Admin → AegisSpamGuard → Cleanup Choose “Comments cleanup” Run Report-only first, then choose Move to Spam or Delete. Recommended setting Recommended: Move to Spam (safe default). You can recover mistakes from Spam; deletion is permanent and should be used only after validation. Why you need this Admins need to remove existing spam to improve SEO, trust, and site usability. Additional information

Cleanup tools overview (safe batch scanning)

Feature Cleanup tools — Scans existing comments and users in safe batches to identify and remove legacy spam without timeouts. How it works Cleanup uses the same engine scoring but runs with safe batching and can operate in report-only mode so you can validate before changing data. How to access / enable WP Admin → AegisSpamGuard → Cleanup Recommended setting Recommended: Start with Report-only, then Move to Spam. This prevents accidental deletions and lets you verify scoring on old content. Why you need this Admins often inherit spam-filled databases—Cleanup restores quality and reduces moderation workload. Additional information

Multisite network settings + per-site overrides

Feature Multisite controls — Supports network-wide defaults with per-site overrides so you can standardize protection across a multisite network. How it works Network settings define baseline thresholds/modules; each site can override only what it needs (e.g., different aggressiveness for commerce vs blog sites). How to access / enable WP Network Admin → AegisSpamGuard → Settings (Network) Configure global defaults On an individual site, override settings as needed. Recommended setting Recommended: Set conservative network defaults; override only for high-risk sites. Conservative defaults reduce network-wide false positives while still providing meaningful protection everywhere. Why you need this Admins running agencies or multisite installs need centralized control with safe flexibility. Additional information

JSON export/import (rules + weights + thresholds)

Feature Export/Import — Exports and imports your configuration as JSON (allow/deny lists, weights, thresholds, and key settings). How it works This makes it easy to move a tuned configuration between sites or restore settings after testing. How to access / enable WP Admin → AegisSpamGuard → Settings Find Export/Import section (if present) Export JSON; to restore, import JSON and save. Recommended setting Recommended: Export after initial tuning and before major changes. A snapshot lets you roll back quickly if a change increases false positives. Why you need this Admins managing multiple sites need fast, consistent configuration without redoing work. Additional information

Search form protection (anti-SEO spam + CPU protection)

Feature Search form protection — Stops bots from abusing WordPress search by scoring suspicious queries and rate-limiting aggressive activity. How it works The search term is scored; block/hold can return a 429 rate-limit response, and Challenge can apply a small delay to discourage automated scraping/search spam. How to access / enable WP Admin → AegisSpamGuard → Settings Enable “Search form protection”. Save changes. Recommended setting Recommended: ON for public sites. Search abuse can generate thousands of low-value pages and waste CPU; protection reduces that risk. Why you need this Admins protect SEO and performance by preventing bot-driven search spam pages. Additional information

Any POST mode include admin-ajax.php / admin-post.php allowlists

Feature AJAX & admin-post protection (allowlisted) — Optionally include admin-ajax.php and admin-post.php POST submissions in Generic POST mode using allowlisted actions/patterns. How it works These endpoints are widely used by plugins; AegisSpamGuard keeps them OFF by default for safety and requires allowlists to avoid breaking legitimate features. How to access / enable WP Admin → AegisSpamGuard → Settings Site-wide protection Enable “Include admin-ajax.php” and/or “Include admin-post.php” only if you add allowlisted actions/paths. Recommended setting Recommended: Leave OFF unless you know the exact actions you must protect. Incorrect allowlists can break forms and AJAX features; turn on only after testing. Why you need this Admins get ‘whole-site’ coverage while retaining safe defaults that don’t disrupt site functionality. Additional information

Any POST / Any Form mode (generic protection)

Feature Generic POST / Any Form protection — Protects unknown theme forms and unsupported plugins by scoring front-end POST submissions even without an adapter. How it works The core guard runs early, skips wp-admin/REST/AJAX by default, avoids double-handling known adapters, then scores POST fields and enforces policy (block/hold; challenge can be enforced if configured). How to access / enable WP Admin → AegisSpamGuard → Settings Site-wide protection Enable “Protect all POST submissions (generic forms)” and save. Recommended setting Recommended: ON with “Block on Challenge” ON while tuning. Generic POST mode catches more vectors; blocking Challenge prevents bot floods until thresholds and allowlists are tuned. Why you need this Admins with custom themes, bespoke forms, and niche plugins get protection without waiting for adapters. Additional information

Geo/ASN provider options (local DB / optional MaxMind with caching)

Feature Geo/ASN providers — Lets you choose how geo and ASN enrichment works (local-first with caching; optional MaxMind where configured). How it works Geo/ASN enrichment can add context for rules (country/ASN allow/deny). Caching prevents repeated lookups and keeps performance stable. How to access / enable WP Admin → AegisSpamGuard → Settings Geo / ASN defaults Choose provider and cache behavior (if available). Recommended setting Recommended: Keep Geo/ASN OFF unless you need geo rules; enable only after confirming hosting performance. Geo lookups are optional—don’t add complexity unless you’ll use the rules. Why you need this Admins running targeted geo restrictions or seeing country-based spam benefit from this optional layer. Additional information

Archives: FAQs | Aegisify - WordPress Tools, Security…

Categories: AegisSpam
Registration protection
read more
Categories: AegisSpam
Cleanup: Users scan (spam accounts cleanup)
read more
Categories: AegisSpam
Cleanup: Comments scan (report / spam / delete)
read more
Categories: AegisSpam
Cleanup tools overview (safe batch scanning)
read more
Categories: AegisSpam
Multisite network settings + per-site overrides
read more
Categories: AegisSpam
JSON export/import (rules + weights + thresholds)
read more
Categories: AegisSpam
Search form protection (anti-SEO spam + CPU protection)
read more
Categories: AegisSpam
Any POST mode include admin-ajax.php / admin-post.php allowlists
read more
Categories: AegisSpam
Any POST / Any Form mode (generic protection)
read more
Categories: AegisSpam
Geo/ASN provider options (local DB / optional MaxMind with caching)
read more

What’s New At Aegisify