Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter vs Contact Camo

Titan Anti-Spam & Security is a complete protection solution designed to secure your website against spam, login attacks, and unauthorized access. Websites are constantly targeted by automated spam bots, brute force login attempts, and malicious access patterns. Titan helps you block spam comments, protect your login page, enforce strong authentication, and apply essential security hardening rules from a single dashboard. Whether you run a blog, business site, WooCommerce store, membership platform, or agency network, Titan helps you: Stop comment spam automatically Protect your login area from brute force attacks Limit login attempts and lock suspicious activity Monitor login activity and security events Apply security hardening best practices Enable two-factor authentication for stronger account security in Pro Create backups with advanced storage options in Pro Titan is designed to reduce risk without affecting legitimate visitors or requiring captcha challenges. Quick links 📘 Documentation – Complete setup and configuration guide 💬 Support Forum – Get help with spam protection, login security, and plugin settings from the community and support team. ⭐ Go Pro – Unlock Machine Learning spam detection, two-factor authentication, backups, and priority support. Anti Spam Protection Spam comments can damage your SEO, clutter your database, and waste moderation time. Titan provides automated spam protection that works in the background without interrupting real users. Every comment is checked against a global spam database and evaluated using intelligent filtering rules. Suspicious comments are automatically marked as spam and hidden from public view. Automatic spam comment blocking: Blocks spam comments in real time using a global spam database and intelligent filtering rules. Suspicious submissions are automatically marked as spam before they appear publicly. Block spam comments without captcha: Protect your site from comment spam without forcing visitors to solve captcha challenges. Real users experience a smooth commenting process. Save spam comments for review: Optionally store filtered spam comments in the moderation area so you can verify filtering accuracy and review blocked content. Detailed spam processing logs: View logs of processed comments to understand how spam filtering works and monitor spam activity trends. Privacy policy link integration: Display a privacy policy notice under comment forms to help with transparency and compliance requirements. This ensures real visitors can interact freely while bots are filtered automatically. Security Hardening Tools Titan includes built-in security hardening options that reduce publicly exposed information and protect your website from common automated attacks. Many bots scan websites looking for version numbers, exposed login patterns, weak passwords, or XML-RPC endpoints. Titan helps minimize those risks with configurable hardening controls that strengthen overall site security. Strong Password Enforcement: Force users to create strong passwords based on the WordPress password strength meter. Weak passwords are a leading cause of account compromise. Enforcing strong credentials significantly improves login security and reduces unauthorized** access risks. Hide Author Login: Attackers can attempt to discover usernames using author archive URLs. Titan prevents user enumeration by restricting access patterns that reveal valid login names. This reduces the effectiveness of targeted brute force login attacks. Disable XML-RPC: XML-RPC can be abused for automated login attacks and pingback spam. Disabling XML-RPC reduces exposure to remote brute force attempts and limits unnecessary resource usage. Hide Version Information: WordPress core and plugins sometimes expose version numbers in the source code. Attackers use this information to target known vulnerabilities. Titan removes version references to reduce fingerprinting risks. Remove Version Query Strings: JavaScript and CSS files often include version query parameters. Removing these prevents attackers from identifying the exact WordPress or plugin version running on your site. Remove Meta Generator Tag: The generator meta tag can reveal your CMS version. Titan removes it to reduce publicly visible system information and lower exposure. Remove HTML Comments: Some themes and plugins output HTML comments that may expose structural details. Titan can remove these comments to limit unnecessary information disclosure. Together, these security hardening options reduce your attack surface and strengthen your website without affecting normal functionality. Activity Monitoring and Logs Security is not only about blocking attacks. It is also about visibility and awareness. Titan includes built-in monitoring tools that help you understand login behavior and security activity on your website. Login Attempts Log: Track failed login attempts in real time. See which IP addresses are attempting access, how many retries were made, and when lockouts were triggered. This helps you evaluate brute force protection effectiveness. Activity Logger: Monitor security-related events across your site, including login activity and system actions. Identify suspicious patterns before they escalate. Error Log Viewer: View plugin-related errors directly from the dashboard. Diagnose configuration issues quickly without accessing server files. Debug Information Export: Export diagnostic information when contacting support. This reduces troubleshooting time and speeds up issue resolution. With proper monitoring and logging, you are not only blocking attacks but also gaining insight into how your website is being targeted. PRO Anti Spam Features Machine Learning spam detection: Advanced spam filtering powered by Machine Learning improves detection accuracy by analyzing behavioral patterns across large datasets. Scan existing comments for spam: Identify previously approved spam comments and clean up your database. Scan registered users for spam accounts: Detect and flag suspicious user accounts that may have been created by spam bots. Enhanced background spam analysis: Apply additional invisible tests that improve spam protection without affecting legitimate visitors. Upgrade to unlock advanced anti-spam capabilities. PRO Two Factor Authentication Two-factor authentication adds an additional verification step beyond a password. Even if a password is compromised, attackers cannot access the account without the second authentication factor. QR Code Setup: Scan a QR code with an authenticator app to activate two-factor authentication quickly and securely. Manual Secret Key Configuration: Set up two-factor authentication manually if QR code scanning is unavailable. Per User 2FA Management: Enable or manage two-factor authentication individually for specific users or roles. Compatible with TOTP Apps: Works with popular authenticator apps such as Google Authenticator and other TOTP-compatible applications. Two-factor authentication significantly strengthens login security for administrators and users. Upgrade to Titan Pro to enable Two Factor Authentication and advanced account protection. PRO Backup and Recovery Regular backups are essential for website security and recovery planning. If something goes wrong, having a recent backup allows you to restore your site quickly. Scheduled Automatic Backups: Automatically create backups at defined intervals to ensure recent recovery points are always available. Manual Backup Creation: Generate a backup instantly before making major changes to your website. FTP Storage Support: Store backups on a remote FTP server for additional protection and redundancy. Dropbox Storage Integration: Save backups to Dropbox for secure off-site storage. Automatic Archive Cleanup: Remove older backup files automatically to manage storage usage efficiently. Adjustable Backup Performance: Control backup speed to balance performance and server resource usage. Backups can be managed directly from the Titan dashboard for centralized control. Upgrade to Titan Pro to unlock scheduled backups and external storage options. Use Cases Titan is suitable for: • Blogs receiving large volumes of comment spam • WooCommerce stores protecting customer login pages • Membership websites securing user accounts • Agencies managing multiple client websites • Educational platforms enforcing stronger authentication • Website owners looking for anti-spam and login security in one plugin Support Need help? Open a new thread in the Support Forum, and we’ll be happy to assist. Documentation Discover how to make the most of Robin with our detailed and user-friendly documentation. Titan is backed by Themeisle, trusted by over 1 million WordPress users worldwide.

Contact Camo protects email addresses from scrapers and bots — now with a native Gutenberg block so you can build beautiful, protected contact experiences without touching a single line of code. What Is It? Contact Camo is a plugin for WordPress developed by Plan Left that effectively hides or obfuscates email addresses from scammers, web scrapers and internet bots to help minimize spam and other nefarious, automated actors. In addition to protecting email addresses, Contact Camo provides rich, visual control over how those protected email addresses are displayed and interacted with by your visitors — all from inside the WordPress block editor. Now with a Native Gutenberg Block! Contact Camo now feels right at home in the WordPress block editor. Drag it in, configure it visually, and see a live preview of exactly what your visitors will see — no shortcodes, no guesswork. Everything is point-and-click: 🎨 Pick an icon — Browse and search hundreds of WordPress icons right inside the sidebar. Choose your size from XS to XL, or dial in an exact pixel size. 🖌️ Choose a color — Set the text and icon color using your theme’s color palette or a custom color picker. It just works. 🔘 Link or button? — Toggle between a standard link and a styled button in one click. Your theme’s button styles apply automatically. 📋 Inline or popup form? — Show a sleek embedded contact form or a modal popup — your choice, configured visually. 📐 Control the layout — Adjust container padding and form width to fit perfectly within your design. 👁️ Show what you want — Display the icon and text together, icon only, or text only. You decide. ⚡ Live preview — Every change you make is reflected instantly in the editor canvas. What you see is what you get. All of the above is available through the shortcode too, for those who prefer it. Example Use Cases Educational Organization with large faculty directories Nonprofits who need to be accessible without displaying in-content email addresses Large Organizations who have departmental pages and points of contact but don’t want to maintain multiple contact forms Anyone who doesn’t want to expose email addresses to the scammers, scrapers and bots of the internet. Why Did You Make This Plugin? We work with many non-profits and educational organizations that need to list contact info in directories on their website. Due to the public visibility of these and their large user base, our clients’ web properties are under constant threat from spammers and bots. We wanted to ensure that their user directories were safe from these threats while still being functional to visitors. In other words, we needed to hide a bunch of email addresses from the outside world while still allowing the outside world to contact those users via their email address. When we got to developing this plugin, we knew we had to provide a solution that was as bulletproof as possible while allowing our clients and customers the most amount of control over things as practical. Ultimately, we needed to create a plugin that would: Optionally hide or obfuscate email addresses from scrapers and bots securely and confidently. For our use case, email addresses needed to be obfuscated in the source code, the DOM, and in HTTP requests. We took the email address out of the client-side equation completely by just tucking it safely away in the database in a lookup table instead of providing a workaround that simply disguises the email address. We essentially took the email address to a safe house and sent out its representative to interact with the outside world on its behalf. Nobody gets the email, not no way, not no how, see?!? Provide users with lots of control over the UX of protected email addresses, without the need for cumbersome configuration. The Gutenberg block handles all of that visually, and the shortcode is still there for power users. Be performant in capabilities, lightweight in footprint, and opinionated in scope. The client was very pleased with the end-result and so were we. So, we decided to offer it back to the community. Our development team reviewed and scrutinized the existing plugin, found areas for improvements and further customizations, and baked them right in for everyone to use. Who Is It For? Site administrators and content editors/moderators. Anyone with a WordPress site that would like the peace of mind of knowing that their users’ email addresses are safely hidden from spam bots and other unintended consumers with ill intent. Content creators that don’t want to worry about the complications and time expenditure of dealing with and managing their user base getting spammed from their platform. And especially when any of the above mentioned require some level of control over what’s displayed to their users, who may very well be their customers or clients or patients, etc… It’s for site builders that want protection AND customization without being overwhelmed. With the new Gutenberg block, that means literally anyone editing a page in WordPress — no code required. What Problems Does It Solve? Contact Camo hides or obfuscates email addresses in the source code AND the DOM. Not only this, it ensures the unobfuscated email address is never used in any page or ajax request from its originating context; all handling/processing is done server-side. Once obfuscated, the client-side never sees the original email address again (where obfuscated). The obfuscation (key) is a hash that is stored in a lookup table with the original email address. A few of the limitations we found in some existing (but great) plugins: email address only obfuscated in DOM, but not in source code email address only obfuscated in source code, but not in the DOM integrating with a 3rd-party service that scrapes entire pages and performs a search-and-replace of email addresses with obfuscated versions in the source code email address obfuscation using only html entities replacement few options for controlling output no contact form or fallback options no native block editor support How Does It Work? With the Gutenberg block (recommended): Search for “Contact Camo” in the block inserter, drop it onto your page, enter the email address you want to protect, and configure everything else from the visual sidebar. Done. You’ll see a live preview of the output right there in the editor. With the shortcode: Contact Camo provides a simple shortcode that can be placed anywhere shortcodes are supported. The shortcode’s default output is a clickable link with the obfuscated email address’s generated hash stored in a data attribute. On click, this hash is used to look up the email address and then open the browser’s configured email client with the “To” field pre-populated. The shortcode accepts parameters for overriding the default output — output a button instead of a link, add CSS classes, change the text output, choose an icon, set a color, and more. The shortcode also supports an embedded contact form or an optional modal popup contact form as an alternative to triggering the email client. What is Hide vs Obfuscate? For our plugin, we wanted to give site administrators the option to either completely hide the email address and never let any end content consumer see any piece of the email, or to hide the email until requested and reveal it in context after a specific action is taken. Hiding the email address: The site visitor will never see the email address, and instead only be presented a popup contact form that submits and mails through ajax. This option totally hides the email, and it will never be revealed unless the emailed recipient emails the form submitter back. Obfuscating the email address: The site visitor will not see the email address until the contact button (or link) is clicked. On click, the email address will be revealed and the visitor can copy or mail to that address. What Can I Do With It? We chose to err on the side of simplicity, balanced with enough options to be truly useful. The Gutenberg block makes all of these options accessible without writing a single line of code: Show a link or a button — your theme’s styles applied automatically Add an icon from a library of hundreds, with full size control Set a custom text and icon color using your theme palette or a custom picker Show only the icon, only the text, or both Display an inline contact form or a modal popup form Control padding, form width, and layout Add a custom CSS class or anchor ID for targeting with your own styles or JavaScript All of the above is also available via the shortcode for developers and power users. Basic Usage Block Editor: Search for “Contact Camo” in the block inserter (+), add it to your page, enter an email address in the sidebar, and you’re protected. Shortcode: [contactcamo email="[email protected]"] output: a basic anchor tag with default text [contactcamo email="[email protected]" label="Contact Us" form=true button=true] output: a clickable button with text that says “Contact Us” [contactcamo email="[email protected]" label="Contact Us" form=true button=true popup=true] output: a clickable button that, when clicked, pops up a modal contact form [contactcamo email="[email protected]" icon="email" display="both" iconsize="md"] output: a link with a mail icon and text [contactcamo email="[email protected]" id="one-contactcamo-to-rule-them-all" label="Fly, You Fools!" button=true class="btn btn-lg btn-lt-blue"] output: a large, styled clickable button with custom text Shortcode Parameters email required string the email address to be obfuscated label optional string default=”Email” the visible text on the link or button subject optional string pre-fills the email subject line icon optional string a Dashicon slug (e.g. email, phone, admin-users) to show alongside the label display optional string default=”both” controls what is shown: both (icon + text), icon (icon only), or text (text only) iconsize optional string default=”sm” icon size preset: xs (12px), sm (16px), md (20px), lg (28px), xl (36px), or custom iconsizepx optional integer default=20 custom icon size in pixels, used when iconsize=custom textcolor optional string a hex color value (e.g. #e63946) for the text and icon color form optional boolean default=false if true, show a contact form instead of opening an email client popup optional boolean default=false if true, show the contact form in a modal overlay when clicked formtitle optional string default=”Compose Email Message” the heading shown at the top of the popup form formwidth optional integer default=325 maximum width of the contact form in pixels; set to 0 for full width button optional boolean default=false if true, render a element instead of an tag containerpadding optional integer default=15 padding in pixels applied to the outer container class optional string CSS class(es) to add to the link or button element, space delimited id optional string HTML id attribute to add to the link or button element There is also an admin page for Contact Camo. From this page, you can configure where the contact form redirects after form submission.