A full walkthrough of how WebTrust AI keeps your sites safe.
Every inbound request — page view, form post, or API call — is scored 0–100 in real-time before your application code even runs. The score combines IP reputation, behavioural signals, payload inspection, geo-data, and historical patterns.
WebTrust fingerprints every visitor against 400+ known bot signatures, analyses User-Agent strings, checks headless browser tells, and scores mouse / keyboard behaviour. Detected bots are blocked, flagged, or served a JS challenge — your choice.
When a visitor's threat count crosses your configured threshold, WebTrust automatically adds their IP to the ban list. Bans propagate across all your sites instantly and expire on your schedule.
Every request is mapped to a country, city, ISP, and proxy/VPN/Tor status using the ip-api.com database. Visualise your traffic on a world map and block entire regions in two clicks.
WebTrust intercepts every form submission and runs it through a multi-layered spam pipeline: honeypot field detection, keyword scoring, submission-rate limiting, and an ML spam score. Clean submissions pass through; spam is logged and optionally blocked.
The dashboard refreshes every 8 seconds. See a live feed of every request, Chart.js time-series charts for traffic and threats, device breakdowns, top-country maps, and a security score ring that summarises your overall posture.
The PHP SDK ships as a single file. Drop it in, call two lines, done. The REST API lets you query threats, traffic, and ban lists programmatically — build your own dashboards or pipe data into your SIEM.
Sign up free — no credit card. API key generated instantly.
Paste your domain. WebTrust creates a unique key per site.
Drop the SDK into your PHP header. That's the entire integration.
Live traffic, threats, and your security score update in real-time.