EZY.ai – AEO & AI SEO for ChatGPT, Claude & Gemini vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

EZY.ai is the first all-in-one AEO plugin for WordPress. Get found on ChatGPT, Claude, Perplexity & Gemini – then turn that visibility into customers with AI-written blogs and a lead-capturing chatbot. Free forever analytics: switch on visitor analytics in Settings and watch every AI crawler and AI-referred visitor land on your site, with no card and no trial clock. Analytics is off until you turn it on – nothing is recorded before that. The way people search is changing. ChatGPT now has 900M+ weekly users asking for recommendations instead of Googling – and AI search visitors convert at significantly higher rates than traditional search traffic. Without proper Answer Engine Optimization, AI engines either skip your site, cite outdated information, or recommend competitors with cleaner signals. Paid plans from $29/month unlock 1-Click Fix All, AI blogs and FAQ Hubs, Prompts & Competitors tracking, and lead-capturing chat. Real attributed results: Galliard Homes traced an £800,000 property sale to a ChatGPT referral. Transputec hit 774% growth in AI assistant visits in under 90 days. GlocuRX hit 332% growth. How is EZY.ai different from Yoast and Rank Math? Yoast and Rank Math are SEO plugins built for Google rankings. They’ve recently added basic llms.txt generation, but they don’t track AI bot visits, prompt visibility, or AI-referred traffic. EZY.ai is purpose-built for AEO from the ground up, and it runs alongside them – it doesn’t replace them. Yoast: generates a basic llms.txt URL list. No AEO analytics, no AI bot tracking. Rank Math: same – a config screen for llms.txt, no AEO-specific analytics. Other AEO plugins: mostly generate schema only. None track AI bot visits, prompt visibility, or competitor citations. EZY.ai: the full AEO stack – llms.txt + llms-full.txt + facts + schema + meta + AI analytics + competitor tracking + Reddit monitoring. No listing fees, ever: unlike traditional search visibility, winning organic AI citations requires zero paid listing or slotting fees. EZY helps you win recommendations purely on structural authority. Core Features AI Analytics – every AI crawler visit AND every AI-referred human visitor, across ChatGPT, Claude, Perplexity, Gemini & Copilot – plus weekly prompt tracking, competitor citations, and your AI Visibility Score 1-Click Fix All – the only AEO platform that cycles through everything: generates, optimizes and uploads your schema, meta, llms.txt, facts and sitemap in a single click Content Engine – original, expert-cited blogs and FAQ Hubs in your brand’s tone of voice, written and published for you. On Growth and Scale, they inherit your site’s own header and footer (theme inheritance) EZY Capture – an AI assistant on your site, capturing leads 24/7 Alerts & Best Practices – citation changes, competitor moves and AI-visit spikes emailed to you, with guidance on what to do next Plans Every plan is priced per domain, and annual billing is available on all paid plans. Free forever: AI-visit analytics, robots.txt, llms.txt, and XML sitemap for one domain, plus an EZY Capture free trial. Starter – $29/month: the full AEO file suite plus 1-Click Fix All (schema, meta, llms.txt, llms-full.txt, facts, sitemap), Prompts & Competitors tracking, email alerts, 2 AI blogs a month, a FAQ Hub every two months, and EZY Capture (up to 50 visitor messages a day). Growth – $49/month: everything in Starter, plus 4 AI blogs a month, a FAQ Hub every month, theme inheritance (your blogs and FAQ Hubs use your own site’s header and footer), and EZY Capture up to 100 visitor messages a day. Scale – $99/month: everything in Growth, plus 8 AI blogs a month, 2 FAQ Hubs a month, and unlimited EZY Capture messages. What EZY.ai Builds and Maintains on Your Site 1. AI Readiness & Technical Files llms.txt and llms-full.txt – machine-readable summaries AI engines use to understand your business robots.txt with explicit AI crawler permissions – without it, some AI engines skip your site by default AI sitemap.xml – purpose-built for AI crawlers, kept in sync as your site changes facts.jsonld – feeds direct facts about your business straight to AI models 2. Structured Data & Schema Bulk Schema.org injection – full creation, optimisation and injection across your site Entity optimisation – helps machines understand the context of your content Meta description automation – created, optimised and injected at scale 3. Analytics & Tracking AI agent + AI-referred user tracking – see every AI bot visit (ChatGPT, Claude, Perplexity, Gemini, Copilot) AND every human visitor who arrived from an AI tool. Two views: are AI engines indexing you, and are AI users actually clicking through? Prompt tracking – we test your domain against 5+ prompts across ChatGPT, Claude, Perplexity, and Gemini every week. See exactly where you appear and where you don’t. Citation tracking – see exactly where you appear (or don’t) for each prompt Competitor analysis – automatically track competitor citations across AI engines weekly. See where rivals appear that you don’t. Reddit detector – track your Reddit presence and mentions AI Visibility Score – proprietary EZY.ai score, tracked over time Email alerts & best practices – when your citations change, a competitor gains ground, or AI visits spike, EZY emails you – with best-practice guidance on what to do about it 4. Content & Authority AI-assisted blogs – auto-generated and published to your WordPress site on a cadence that matches your plan (from 2 a month on Starter up to 8 a month on Scale). Every post is original (checked against your existing content so nothing is duplicated), written in your brand’s tone of voice, cites experts and sources where possible, includes internal links to your key pages, and embeds a lead-capture form – with submissions tracked in your dashboard. FAQ Hubs – automatically generates dedicated, topic-clustered FAQ hub pages, each with FAQ structured data (FAQPage schema) so AI engines can read and cite your answers Theme inheritance (Growth and Scale) – published blogs and FAQ Hubs render inside your own site’s header and footer, so they look like a native part of your website Authority scanner – see which pages carry high authority for your topics Submission tools – submit directly to Google Search Console and Bing Webmaster Tools Content Quality That Actually Gets Cited Most AEO plugins generate basic URL lists or thin schema. EZY runs deep LLM analysis on your live, rendered site – producing enriched files that score 95%+ when tested by major AI models. When we asked Google’s Gemini to independently assess EZY’s generated output, it scored it 98/100 and called it “an absolute masterclass in GEO.” The difference shows up where it matters: in citations. AI engines reward enriched, factual, well-structured content – they ignore generic URL dumps. We’ve spent months tuning our generation to maximise citation eligibility, and the results show in the numbers above. EZY Capture – Lead Generation, Set Up for You The same AEO data EZY already holds about your site powers a fast, accurate, lead-capturing assistant – switched on in one click, with no training and no extra setup. It answers visitor questions in your brand’s voice and captures their details (name, email, and what they asked), so you can follow up. Try it free, then it’s included on every paid plan – up to 50 visitor messages a day on Starter, 100 on Growth, and unlimited on Scale. It gets smarter on its own. Over time it learns what your prospects keep asking – and EZY.ai turns those real questions into FAQs and blog posts that answer them. Those answers lift your AI visibility, which feeds the assistant: a loop that compounds while you do nothing. Every other chatbot makes you upload content, paste FAQs, train the bot and maintain it. With EZY that’s already done – the assistant is a by-product of your AEO work, so switching it on costs you nothing extra. Set It and Forget It EZY runs continuously in the background: Weekly: tests your domain against 5+ prompts in ChatGPT, Claude, Perplexity, and Gemini Weekly: tracks competitor citations and surfaces content gaps On schedule: auto-publishes optimised blog posts and FAQ Hubs to your WordPress site at a cadence that matches your plan Real-time: logs every AI bot visit and every AI-referred human user Real-time: re-syncs your llms.txt, schema, and meta when content changes Most AEO plugins are one-time fixes. EZY is an ongoing service. Why EZY.ai is Different Files live on your site, not ours. Generated directly on your WordPress site, under your domain – not served from our cloud. More durable, more in your control. Real automation, not just audits. EZY.ai’s Site-Fixer technology doesn’t just find problems – it solves them. Cloudflare Worker integration. Built on infrastructure that already powers most of the web, available for non-WordPress sites too. Built for agencies too. Manage multiple client domains from one white-label dashboard, with each client on its own plan from $29/month – bundle AEO into your existing offering. Free forever on the plugin and analytics. Paid plans from $29/month unlock 1-Click Fix All, the content engine, Prompts & Competitors tracking, and lead-capturing chat. How It Works Install the plugin and activate. Connect your free EZY.ai account through the connection wizard. Generate and upload your llms.txt, robots.txt and schema in two clicks. Watch AI visits, citations and engine breakdown in your dashboard. External services This plugin connects to a small number of external services. Each is listed below with what it is used for, exactly what data is sent and when, and links to the provider’s terms of service and privacy policy. No data is sent to any service beyond what is described here. 1. EZY.ai API Service: EZY.ai (https://api.ezy.ai), the platform this plugin is built for. Provider: EZY.ai. Terms of Service: https://www.ezy.ai/terms – Privacy Policy: https://www.ezy.ai/privacy The EZY.ai API powers the plugin’s connected features. It is contacted in the following cases: Account connection (only when you start it): when you connect your site from the Connection page, the plugin sends your site URL, WordPress version and plugin version to establish and verify the link (endpoints: /auth/initiate, /auth/exchange, /verify, /disconnect). Connecting requires an EZY.ai account, and creating that account means accepting EZY.ai’s Terms of Service and Privacy Policy. That acceptance is the consent for the connected features below. If you never connect, none of the connected features run. Content sync (connected sites only): the plugin fetches your generated AEO content (robots.txt, llms.txt, llms-full.txt, facts.json, sitemap.xml, schema markup, meta descriptions, FAQ hubs, blogs) and reports sync status (endpoints: /robots-txt, /llms-txt, /llms-full-txt, /facts-json, /sitemap-xml, /schemas, /meta-descriptions, /faqs-html, /faq-hubs, /faq-hub/{slug}, /blogs, /blog/{slug}, /listing-template, /integrations/{id}/*, /content-status, /trigger-refetch). Requests carry your site URL and the connection token. Referral invitations (only when you send one): if you use the “Recommend EZY.AI to a friend” form on the Connection page, the email address, name and message you type are sent to /invite so EZY.AI can email that person your invitation. Nothing is sent unless you fill in and submit that form. Visit analytics sync (connected sites only): visits recorded by the local analytics are also synced to your EZY.ai dashboard (endpoints: /track, /visits/export). Records contain a salted, partially masked IP hash (never the raw IP), the visited URL with sensitive query parameters stripped, the user agent, and the detected agent type. EZY Capture chat widget (connected sites only, can be switched off): when the chat assistant is enabled, the public site loads its script from https://api.ezy.ai/api/chatbot/widget/loader.js, and visitor chat messages are processed by EZY.ai to generate answers. Install diagnostics (opt-in only, disabled by default): if, and only if, you enable “Share install diagnostics” in Settings, the plugin sends one daily ping to /beacon containing: site URL and domain, plugin / WordPress / PHP versions, locale, multisite flag, a salted hash of the admin email (never the address itself), connection state, and aggregated 7-day visit counts. No per-visitor data is included. Disable the checkbox at any time and all sending stops immediately, including the final uninstall notice. 2. OpenAI (crawler verification data, download only) Service: OpenAI publishes machine-readable lists of the IP addresses used by its crawlers (https://openai.com/gptbot.json and https://openai.com/chatgpt-user.json) and a public key directory for verifying signed ChatGPT requests (https://chatgpt.com/.well-known/http-message-signatures-directory). Used for: verifying that a visitor claiming to be GPTBot or ChatGPT genuinely comes from OpenAI, so the AI analytics on your dashboard are accurate. The IP lists are refreshed up to once a day and the key directory up to every 6 hours; both are cached locally. Data sent: none. These are plain downloads of public files. No information about your site or your visitors is transmitted to OpenAI. Provider: OpenAI. Terms of Use: https://openai.com/policies/terms-of-use – Privacy Policy: https://openai.com/policies/privacy-policy 3. Perplexity (crawler verification data, download only) Service: Perplexity publishes machine-readable lists of the IP addresses used by its crawlers (https://www.perplexity.com/perplexitybot.json and https://www.perplexity.com/perplexity-user.json). Used for: the same crawler verification as above, for PerplexityBot and Perplexity-User traffic. Refreshed up to once a day and cached locally. Data sent: none. Plain downloads of public files, no site or visitor data is transmitted. Provider: Perplexity. Terms of Service: https://www.perplexity.ai/hub/legal/terms-of-service – Privacy Policy: https://www.perplexity.ai/hub/legal/privacy-policy 4. Cloudflare (cache purge, only if your site uses Cloudflare) Service: Cloudflare cache purge API (https://api.cloudflare.com). Used for: after content on your site is updated, the plugin asks Cloudflare to clear its edge cache for the affected URLs so visitors see fresh content. This runs only if Cloudflare credentials are already present on your site (stored by the official Cloudflare plugin, or added by you for EZY.ai). If no credentials exist, Cloudflare is never contacted. Data sent: the list of your own page URLs to purge, authenticated with your stored Cloudflare zone ID and API token. Provider: Cloudflare. Terms: https://www.cloudflare.com/website-terms/ – Privacy Policy: https://www.cloudflare.com/privacypolicy/ Source Code The analytics dashboard shown in wp-admin is a compiled JavaScript bundle (assets/dist/app.js and assets/dist/app.css). The complete human-readable source for that bundle is included in this plugin under src/ (TypeScript + React), together with the full build configuration (vite.config.ts, tsconfig.json, tailwind.config.ts, postcss.config.js, package.json, pnpm-lock.yaml). To rebuild the bundle from source: Install Node.js 20+ and pnpm (npm install -g pnpm) From the plugin root directory run: pnpm install Run: pnpm build The build writes its output to assets/dist/. Every other script and stylesheet in the plugin (assets/js/, assets/css/) ships uncompiled and human-readable.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!