From fcd1a0c0c703430f200aa5f554d9a9278f60223b Mon Sep 17 00:00:00 2001 From: Chris Portscheller Date: Thu, 23 Jul 2026 09:23:04 -0500 Subject: [PATCH] docs: surface WAF integrations (Cloudflare, AWS WAF) in listing description MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The edge-enforcement story — deception detections arming the customer's existing WAF — is the differentiator and was absent from the wp.org and CDN descriptions. Claims limited to shipped providers (Cloudflare, AWS WAF) plus webhooks. --- cdn-files/plugin-info.json | 2 +- readme.txt | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/cdn-files/plugin-info.json b/cdn-files/plugin-info.json index 9c49298..41bf427 100644 --- a/cdn-files/plugin-info.json +++ b/cdn-files/plugin-info.json @@ -9,7 +9,7 @@ "requires_php": "7.4", "download_url": "https://cdn.webdecoy.com/wordpress/webdecoy-2.3.0.zip", "sections": { - "description": "

WebDecoy provides enterprise-grade bot detection and fraud protection for WordPress websites. Unlike simple CAPTCHA solutions, WebDecoy uses a layered defense approach that analyzes visitors from multiple angles \u2014 including deterministic tripwires that catch scanners with zero false positives.

Key Features

", + "description": "

WebDecoy provides enterprise-grade bot detection and fraud protection for WordPress websites. Unlike simple CAPTCHA solutions, WebDecoy uses a layered defense approach that analyzes visitors from multiple angles \u2014 including deterministic tripwires that catch scanners with zero false positives.

Key Features

", "installation": "
  1. Upload the plugin files to /wp-content/plugins/webdecoy
  2. Activate the plugin through the Plugins menu
  3. Tripwires and local protection are active out of the box \u2014 no API key required
  4. Optionally go to WebDecoy > Settings > WebDecoy Cloud to connect for centralized monitoring and enforcement
", "changelog": "

2.3.0

2.1.0

2.0.0

1.3.0

", "faq": "

Does WebDecoy slow down my site?

No. WebDecoy adds negligible latency; tripwire checks are a fast path lookup and clearance minting is idle-deferred.

Will it block search engines?

No. WebDecoy automatically allows 60+ known good bots including all major search engines, and tripwires only fire on hidden paths no legitimate crawler follows.

" diff --git a/readme.txt b/readme.txt index b69affe..6c45f6d 100644 --- a/readme.txt +++ b/readme.txt @@ -78,6 +78,7 @@ WebDecoy is a **free, fully-functional** bot detection and protection plugin tha Connect an API key to unlock cloud-powered intelligence: +* **WAF Integrations** — Arm your existing edge: push confirmed attackers to Cloudflare or AWS WAF so they're blocked before a request ever reaches WordPress, plus webhooks for any other firewall * **IP Reputation** — AbuseIPDB integration, threat scoring * **VPN/Proxy Detection** — Identify visitors hiding behind VPNs, proxies, and Tor * **GeoIP Enrichment** — Geographic data from MaxMind @@ -121,7 +122,7 @@ The threshold is fully configurable to match your site's needs. = What does WebDecoy Cloud add? = -WebDecoy Cloud adds threat intelligence feeds (AbuseIPDB, VPNAPI, MaxMind), centralized monitoring across multiple sites, indefinite detection history, and automated response features like webhooks and email alerts. [Compare plans](https://webdecoy.com/pricing). +WebDecoy Cloud adds threat intelligence feeds (AbuseIPDB, VPNAPI, MaxMind), centralized monitoring across multiple sites, indefinite detection history, automated response features like webhooks and email alerts, and WAF integrations — confirmed attackers can be pushed to Cloudflare or AWS WAF so they're blocked at the edge, before ever reaching your server. [Compare plans](https://webdecoy.com/pricing). = Does WebDecoy slow down my site? =