EU AI Act Ready vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

EU AI Act Ready is a practical WordPress compliance plugin that helps site owners meet the transparency and disclosure obligations introduced by the EU AI Act. It provides everything you need to disclose AI-generated content, AI-powered chatbots, and AI systems to visitors – and to track and document your compliance progress through a readiness score, self-assessment wizard, and exportable compliance report. The EU AI Act is now in force. Article 50 requires disclosure when users interact with AI systems, AI-generated content, or AI-manipulated media. Article 4 requires deployers of AI systems to take steps to ensure that staff have sufficient AI literacy. EU AI Act Ready addresses both articles with practical, locally-running WordPress tools. No content or personal data is sent to external services. EU AI Act Ready is a technical transparency tool. It does not provide legal advice or guarantee regulatory compliance. EU AI Act Articles Covered Article 50 – Transparency obligations Article 50 requires clear disclosure when users interact with AI systems or AI-generated content. Specifically: Chatbots and virtual assistants must inform users they are interacting with an AI, not a human. AI-generated or AI-manipulated content – including text, images, audio, and video – must be labelled. Content that could be mistaken for authentic human-created material requires clear disclosure. EU AI Act Ready supports these requirements through configurable visitor notices for AI content, AI-powered chatbots, and AI systems detected on your site. Article 4 – AI Literacy obligations Article 4 requires deployers of AI systems to take reasonable steps to ensure that their staff have sufficient AI literacy – understanding what AI tools are in use, their capabilities, their limitations, and how to raise concerns. The AI Literacy checklist in EU AI Act Ready lets you track whether your organisation has addressed these obligations. Final responsibility for assessing and meeting legal obligations remains with the site owner or their legal counsel. Who This Plugin Is For Bloggers and content creators who publish AI-generated articles, images, or media and need to disclose this clearly to readers Businesses using AI chatbots for customer support, lead generation, or virtual assistance E-commerce and SaaS sites integrating AI personalisation, recommendation tools, or AI-generated product descriptions Agencies and developers building compliant WordPress sites for EU-based clients who need documented transparency measures News sites and publishers disclosing the use of AI tools in content research or production Any WordPress site owner who wants to document AI transparency for internal audit, stakeholder review, or legal assessment Key Features Four Disclosure Levels – Choose from No AI used, AI-assisted, AI-generated, or AI-generated & human-reviewed – each level shows a distinct, accurate notice to visitors Frontend Transparency Notices – Automatically display clear visitor notices when content is marked as AI-generated, in four configurable styles: Banner, Inline, Badge, or Modal Quick Edit & Bulk Support – Set the AI disclosure level directly from the Posts list via Quick Edit or bulk actions, without opening the post editor Shortcode Support – Place an AI disclosure notice anywhere using [eu_ai_disclosure]; supports type (content/image/chatbot), style, and message attributes with automatic fallback to saved settings RSS & Feed Disclosure – Optionally append a plain-text AI disclosure to RSS feed items and prefix titles with [AI Content] for AI-marked posts, keeping feed readers informed Chatbot Transparency – Adds disclosure notices for 15+ AI-powered chatbot platforms including Formilla, Intercom, Drift, Tidio, Tawk.to, Zendesk Chat, LiveChat, Crisp, Freshchat, Smartsupp, HubSpot Chat, Chaport, Userlike, Olark, and Chatra, in five styles: Banner, Badge, Inline, Modal, or Tooltip; includes Auto-detect mode that automatically identifies the active platform Compliance Readiness Score – Dashboard displays a 0-100 readiness score across six key obligations with a traffic-light indicator and a checklist of unmet items so site owners know exactly what to address AI Systems Registry – Detects installed WordPress plugins that use AI and matches them against a remote registry of 140+ AI tools; also uses “Possibly AI” heuristic scoring to flag candidate plugins not yet in the registry, and probes your site’s frontend for known AI tool JavaScript signatures; shows all detected AI systems with category, EU AI Act article, and per-tool show/hide toggle for the frontend disclosure notice WordPress Dashboard Widget – A compact readiness overview on the main WordPress Dashboard showing your current readiness score, detected AI system count, AI content count, and quick links to plugin pages Compliance Self-Assessment – Step-by-step wizard covering six EU AI Act use cases (chatbots, AI content, AI images, personalisation, translation, synthetic media); identifies applicable obligations and recommends next actions AI Literacy Checklist (Article 4) – Track whether staff awareness, policy documentation, and training obligations have been addressed; completion counts toward the readiness score Export Compliance Report – Generate a print-friendly report summarising score, AI systems, assessment answers, and literacy status; suitable for internal audit or stakeholder review EU AI Act Timeline – Dashboard section showing enforcement dates with countdowns so you always know what is coming and when AI Content Admin Page – Dedicated admin page listing all AI-marked content items (posts, pages, and custom post types) with their disclosure level, with one-click unmark and bulk actions Media & Image Analysis – Flags potentially AI-generated images using heuristic metadata signals and filename patterns AI Image Labels – Visitor-facing labels on AI-flagged images with configurable tooltip and size; works with Gutenberg, Elementor, Classic Editor, and Bricks Builder, plus an opt-in filter any theme can use to label images it renders itself, including CSS background images in hero and header areas Bulk Scanning Tools – Scan multiple media items simultaneously from the admin dashboard Manual Override Controls – Mark or unmark content and media as AI-generated at any time Customizable Disclosure Messages – Configure wording, style, and placement of transparency notices – show the notice above the content, below it, or in both places; each disclosure level shows its own default message or a shared custom message Lightweight & Performance-Friendly – Detection runs asynchronously or on demand without slowing down your site Minimum Requirements PHP 7.4 or greater (PHP 8.0 or greater recommended) MySQL 5.5.5 or greater, OR MariaDB 10.1 or greater WordPress 6.0 or greater

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!