Every website receives hundreds of automated probes per day — bots testing login forms, scanning for SQL injection points, harvesting email addresses, and filling contact forms with spam. Without active monitoring, these attacks succeed silently.
Drop webtrust.php into your project. Call protect(). Every request is now monitored. The SDK logs asynchronously — your pages load at full speed.
// Step 1: Include the SDK
1 require_once 'webtrust.php';
// Step 2: Activate protection
2 WebTrust::protect('wt_live_••••••••');
// That's it. Your site is now protected.
// WebTrust handles everything else async.Map every request to country, city, ISP, VPN/Tor status. Block entire regions in one click.
Real-time request feed with 8s refresh. Device breakdown, threat charts, and security score ring.
Multi-layer spam pipeline: honeypot injection, keyword scoring, rate limiting, and ML classification.
Built-in dependency CVE scan, static code analysis, penetration test, and HTTP header analysis.
Email or webhook on critical threats, bot spikes, and score drops. Configurable severity thresholds.
Full REST API for querying threats, bans, and traffic. Pipe data into your SIEM, Slack, or custom dashboard.
The built-in security scanner audits your installation on demand — checking dependencies for known CVEs, scanning PHP source for dangerous patterns, probing your own endpoints like a real attacker would, and analysing every HTTP response header.
| Capability |
WebTrust AI Recommended |
DIY / logs only | Cloud WAF | Nothing |
|---|---|---|---|---|
| Real-time threat blocking | ||||
| AI-powered scoring (not just rules) | ||||
| Built-in bot detection | ||||
| Security audit scanner | ||||
| Live traffic dashboard | ||||
| Auto-ban across all sites | ||||
| 2-line PHP integration | ||||
| Form spam protection | ||||
| Pricing for small sites | $0–$29/mo | time cost | $100+/mo | — |
No contracts. No lock-in. Cancel anytime.
"Spam on our contact forms dropped from 300/day to 2/day overnight."
"Integrated on a client's live WordPress site during a video call. They were impressed."
"The AI threat scoring catches things WAY beyond what our old WAF ever caught. The dashboard alone is worth it."