WP Armour Extended

WP Armour Extended adds ways to review and filter spam activity on WordPress websites. Its honeypot protection uses JavaScript to insert a hidden field into supported forms. Bots that cannot use JavaScript cannot fill the field to pass the check, so visitors do not need to solve a CAPTCHA or complete an extra verification field. The honeypot targets automated submissions; a person can still submit spam manually.

Review spam and filter repeat activity

Extended controls let administrators record spam submissions and inspect what bots tried to send. The plugin can also log IP addresses tied to bot activity, block an IP address after multiple spam submissions from the same address, and add another layer of IP-based filtering. Keyword rules mark submissions as spam when they contain words or phrases selected by the administrator.

These controls help administrators examine recurring patterns and adjust filtering as spam activity changes.

Supported WordPress integrations

WP Armour protection covers WordPress comments and registration, bbPress forums, Contact Form 7, Gravity Forms for non-Ajax single-page or step forms, WPForms, Formidable Forms, Caldera Forms, Toolset Forms, Elementor Forms, Fluent Forms, Divi Theme Contact Form, Theme My Login, and WooCommerce Reviews Pro.

WP Armour Extended also supports WooCommerce checkout and registration, including card testing orders, and Easy Digital Downloads checkout and registration. Other listed integrations include QuForm, Ninja Forms, Ajax-based and multi-step Gravity Forms, MC4WP: Mailchimp for WordPress, S2 Members, Ultimate Members, Bricks Builder Form, BricksForge Pro Form, Beaver Builder Contact Form Module, Strong Testimonials, Formcraft Form, Forminator, WS Form, YITH Easy Login & Register Popup for WooCommerce, UsersWP, Youzify, MailPoet, Brevo, JetForm Builder, HTMLform, the Avia Enfold Theme, BuddyPress, BuddyBoss, Sure Forms, and Everest Forms.

Setup and operating details

Install and activate the extension, check which supported integrations your website uses, and configure the Extended controls for spam records, IP logging and filtering, repeat-IP blocking, and keyword rules. Review recorded submissions and adjust the rules as your website's spam patterns develop.

The plugin is described as GDPR compliant and as using no tracking, cookie storage, or external server calls. Its spam filtering is also described as working without external API calls such as those used by Akismet or CleanTalk.