Better Robots.txt – AI-Ready Crawl Control & Bot Governance vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Better Robots.txt replaces the default WordPress robots.txt workflow with a smarter, structured version you can configure and preview before publishing. Instead of a blank textarea, you get a guided wizard with presets, plain-language explanations, and a final Review & Save step so you can inspect the generated robots.txt before it goes live. Built for beginners and advanced users alike, Better Robots.txt helps you control how search engines, AI crawlers, SEO tools, archive bots, bad bots, social preview bots, and other automated agents interact with your site. Trusted by thousands of WordPress sites, Better Robots.txt is designed for the AI era without resorting to hype, vague promises, or hidden rules. Better Robots.txt is available in Free, Pro, and Premium editions. The free plugin covers the guided workflow and essential crawl control features, while Pro and Premium unlock additional governance, protection, and AI-ready modules. Some screenshots on the plugin page show features from all three editions. A quick overview Why Better Robots.txt is different Most robots.txt plugins fall into one of three categories: Simple text editor Virtual robots.txt manager Single-purpose AI or policy add-on Better Robots.txt goes further. It gives you a complete, guided crawl control workflow so you can: Choose a preset that matches your goals Control major crawler categories without writing everything by hand Keep core WordPress protection rules visible and editable Clean up low-value crawl paths that waste crawl budget Generate a cleaner robots.txt output Preview the final result before saving What you can control Better Robots.txt helps you manage: Search engine visibility AI and LLM crawler behavior AI usage signals such as search, ai-input, and ai-train preferences SEO tool crawlers Bad bots and abusive crawlers Archive and Wayback access Feed crawlers and crawl traps WooCommerce crawl cleanup CSS, JavaScript, and image crawling rules Social media preview crawlers ads.txt and app-ads.txt allowance llms.txt generation Advanced directives such as crawl-delay and custom rules Final review before publishing Editions Better Robots.txt is available in three editions: Free – Includes the guided setup, the Essential preset, core crawl control features, and the final Review & Save workflow. Pro – Adds more advanced governance and protection modules, including additional AI, crawler, and cleanup controls. Premium – Unlocks the most restrictive and advanced protection options, including the Fortress preset and additional high-control modules. Some options shown in the interface are marked Free, Pro, or Premium so users can immediately understand which modules belong to each edition. AI crawler controls by edition The Free edition lets site owners choose a basic global policy for AI search and discovery crawlers: allow or block. AI training crawlers remain separated from AI search crawlers, so a site can block training use while still allowing AI-powered search and answer discovery. The Pro and Premium editions add advanced controls, including per-bot AI crawler rules, custom user agents, AI usage signals, llms.txt, and additional machine-readable governance files. Better Robots.txt separates AI-related agents into three practical families: AI training crawlers, such as GPTBot, Google-Extended, and ClaudeBot. AI search and discovery crawlers, such as OAI-SearchBot, PerplexityBot, and Claude-SearchBot. User-action fetchers, such as ChatGPT-User, Perplexity-User, and Claude-User. User-action fetchers are triggered by user requests. Depending on the provider, robots.txt may not apply to those fetches in the same way as it applies to automated crawlers. For stronger enforcement, combine robots.txt with server logs, WAF rules, provider verification, or IP-based controls where available. Presets Setup starts with four modes: Essential – A clean, practical configuration for most websites that want a better robots.txt without complexity. AI-First – For publishers and content sites that want AI-ready governance without shutting down discovery. Fortress – For websites that want stronger protection against scraping, archive capture, and unnecessary crawl activity. Custom – For users who prefer to configure each module manually. For many sites, one preset plus a quick review is enough. Built for beginners and experts Beginners get: A guided setup instead of a raw robots.txt box Preset-based configuration Plain-language explanations for important choices A safer workflow with a final preview step Advanced users get: Editable core WordPress protection rules Fine-grained crawler controls by category WooCommerce-oriented cleanup options Consolidated output options Advanced directives and custom rules A final output they can inspect before publishing AI-ready, without hype Better Robots.txt includes features for modern AI-related crawl governance, including: AI crawler handling Optional llms.txt support AI usage signals for compliant systems Optional machine-readable governance signals for advanced use cases These features help you express how you want automated systems to use your content. However, Better Robots.txt does not claim to control AI by force. Like robots.txt itself, these signals are most useful with compliant systems and good-faith crawlers. What Better Robots.txt is Better Robots.txt is: A robots.txt governance plugin for WordPress A guided configuration workflow instead of a raw text editor A crawl control layer to reduce wasteful crawling A practical bridge between SEO, crawl hygiene, and AI-era policy signaling A way to keep your crawl policy clearer for humans and machines Technical reference for advanced users: Better Robots.txt also maintains a public GitHub repository with product definition, governance notes, and machine-readable artefacts. What Better Robots.txt is not Better Robots.txt is not: A firewall or Web Application Firewall (WAF) An anti-scraping enforcement engine A legal compliance engine A guarantee that every bot will obey your rules A replacement for server-level security or access control It helps you publish a clearer crawl policy. It does not replace infrastructure-level protection. Typical use cases Use Better Robots.txt if you want to: Clean up a weak or noisy default robots.txt Reduce crawl waste on WordPress or WooCommerce Keep major search engines allowed while restricting other bots Control whether archive bots can snapshot your site Publish AI usage preferences more clearly Keep social preview bots allowed while limiting scrapers Review the final file before making it live Key Features Guided step-by-step wizard Preset-based setup: Essential, AI-First, Fortress, Custom Search engine visibility controls AI and LLM crawler governance AI usage signals support SEO tool crawler controls Bad bot and abusive crawler options Archive and Wayback access controls Spam, feed, and crawl trap cleanup WooCommerce crawl cleanup options CSS, JavaScript, and image crawling rules Social media preview crawler controls ads.txt and app-ads.txt allowance Optional llms.txt generation Consolidated output option Core WordPress protection rules remain visible and editable Final Review & Save preview screen About the publisher Better Robots.txt is developed and maintained by Pagup, a digital readability firm based in Quebec, Canada. Pagup helps organizations become correctly understood by search engines, generative AI systems, and autonomous agents. The robots.txt file is the first surface that AI crawlers read when they discover a site. A well-structured robots.txt that references governance files such as llms.txt, ai-manifest.json, and interpretation policies helps AI systems understand your site faster and more accurately. Better Robots.txt is one component of a broader digital readability practice that includes semantic content architecture, AI governance and machine readability, and interpretive SEO. Part of the Pagup ecosystem pagup.com — Digital readability firm. Diagnostic, semantic architecture, AI governance. gautierdorval.com — Doctrine, canonical definitions, interpretive governance research. interpretive-governance.org — Formal versioned standard for interpretive governance. better-robots.com — Documentation and resources for Better Robots.txt.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!