Web-Engine Sentry

Yes, you can access the WordPress Playground at link to test the plugin’s development features, including examples.

You can also use the plugin in development mode on locally hosted domains. The plugin, like the WordPress Playground, operates in a demonstration mode without requiring access to supporting services.

The WordPress Playground runs entirely in your browser and, in Safari, has to send its network requests through a proxy service. Our API refuses that proxy, so the demo captcha cannot reach the Web-Engine Cloud and will not complete. Please open the Playground demo in a Chromium-based browser such as Chrome, Edge or Brave.

This only affects the Playground demo. A normal WordPress installation talks to our API directly, so Safari visitors to your own site are unaffected.

The firewall runs before WordPress loads, through PHP’s auto_prepend_file setting, which the plugin adds to your site’s .user.ini (and .htaccess on Apache with mod_php). That setting names we-sentry-prepend.php, a small loader in your WordPress folder that runs the firewall only while the plugin is installed. Deactivating or deleting the plugin removes the setting. PHP can keep using a cached copy of .user.ini for up to five minutes, so the loader is left in place: once the plugin is gone it does nothing. You can delete it once five minutes have passed, unless your host added the setting to your PHP configuration by hand, in which case ask them to remove it first.

A comprehensive user guide is available at https://www.web-engineer.co.uk/doc/sentry-wordpress.

We plan to expand our support for additional third-party plugins. Please feel free to open a support topic on WordPress.org, and we will prioritize adding support if feasible.

This product is fully supported. You can raise a support topic here or, post a ticket directly with us from the Web-Engine Cloud at https://www.web-engineer.co.uk/doc/sentry-wordpress.

This plugin is service-ware, providing a gateway to our cloud-based services, enhancing the security of your website. Registration is free.

Sentry is in public beta. During the beta everything is free except text code verification, which costs 6-20 credits per message depending on the destination country. After the beta the puzzle and email code methods are charged per successful solve on a pay-as-you-go basis, and each site carries a platform fee of 100 credits (about £1) a month, with your first site free for 3 months. Credits are shared across all of the sites on your account. The basic image captcha is always free.

The basic captcha can easily be solved by bots and / or by using AI tools; the puzzle, email and text methods include additional measures to make this much less likely to be a problem.

Also, by paying for the service, you’re helping to support our team, and that means we can continue to further improve the range of products and services we provide.

Our plugin prioritizes user privacy. We refrain from utilizing your visitors to train AI models or recording any information beyond what is essential to verify the authenticity of your users. Furthermore, we do not share any data collected during this process with third parties.

The advent of artificial intelligence has challenged the effectiveness of Captchas. While it is not feasible to guarantee complete protection against automated attacks, our objective is to render the process as challenging as possible while maintaining user-friendliness. The service is not limited to a single type of puzzle, and we employ additional metrics, such as the visitor’s location and solving speed, to further profile potential actors.

Our primary objective is to continuously enhance this plugin, both in terms of the range of supported plugins and the execution method.

You can post a ticket directly with us from the Web-Engine Cloud. Alternatively, you can email support@web-engineer.co.uk.

An API and a PHP-based SDK are available, enabling direct integration with our services. These will be released in the near future under the same license as this plugin, allowing developers to integrate with their products.

This service is funded by its users, eliminating the incentive to utilize user activities to train an AI or gather statistics and intelligence for broader operations. This focus enables us to concentrate on delivering high-quality products for our customers.

We also build for resilience. The service is powered by our cloud and distributed across multiple datacentres, with automatic failover between them – so your login, forms, and comments stay protected even through a regional outage.

This appears when our service rejects your site’s key while starting a challenge (an HTTP 401 response). It usually means the site has become disconnected from the Web-Engine Cloud, or its keys were reset or rotated, so the captcha cannot load until the site is reconnected.

Reconnect your site — or re-enter your public and private keys — from the plugin settings. A step-by-step guide is available at https://www.web-engineer.co.uk/doc/sentry-wordpress. If the message persists after reconnecting, please post a ticket.