Promptor vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Try AI on your website in under 60 seconds — no API key required. See real answers from your own content. No setup, no configuration, no credit card. Promptor turns your WordPress site into an AI-powered sales assistant that answers questions, recommends services, and captures leads — all based on your actual content. Unlike generic chatbots, Promptor reads your pages and posts. It knows what you offer, speaks in your context, and helps visitors take the next step. New in 2.0: a completely redesigned admin, a beautiful new chat widget, and dark mode for both. Choose Light, Dark, or Auto and everything follows — the panel you work in and the chat your visitors see. Live Demo See Promptor in action: https://promptorai.com/demo Experience how the AI answers real questions, recommends services, and captures leads. See it working instantly Activate the plugin and start the free trial (no API key needed) Select up to 3 pages to train the AI on Ask a question and see a real answer from your own content That’s it. No sign-ups. No configuration. No credit card. What’s New in 2.0 A brand-new chat widget — Softer message bubbles, a refreshed header and polished recommendation cards, in the brand colors you already chose Dark mode, everywhere — Light, Dark, or Auto for both your admin panel and the chat your visitors see A redesigned admin — One consistent panel with clear navigation, so every screen feels like part of the same product Knowledge bases as cards — Browse them in a visual grid and manage, sync or copy a shortcode from one place Save & Sync in one click — A guided flow that sets up a knowledge base for you, without hunting through menus Answers in plain language — See what a visitor asked, what Promptor answered, and every service, product, article and FAQ it recommended, each one a link Everything you already set up — your colors, knowledge bases, leads and settings — carries over exactly as it was. What Promptor does for your business Answers visitor questions 24/7 — based on your actual pages, posts, and services Captures leads inside the chat — visitors share their details naturally during conversation Turns visitors into leads — guide users toward booking, inquiry, or purchase Responds in the visitor’s language — the AI automatically matches the language of the question Who is Promptor for? Service businesses that lose leads to slow response times Founders who need to qualify leads outside business hours Local businesses that want to answer common questions automatically Agencies adding AI-powered engagement to client websites WooCommerce stores recommending products through conversation (Pro) Free Features No API Key Trial — Start instantly with 25 free AI queries, no OpenAI account needed Mini Knowledge Base — Train AI on up to 3 pages during trial or with your own API key Suggested Questions — Onboarding generates sample questions so you see results immediately Real Content Answers — AI responds based on your actual pages, not generic training Save & Sync — Pick your pages and Promptor builds the knowledge base for you in one click Lead Capture — Collect visitor contact information directly inside the chat Lead Inbox — View recent inquiries in the WordPress admin Plain-Language Answer Details — See exactly what was asked, answered and recommended, with links AI Cost Guardrails — Set daily and monthly spending limits with automatic model fallback Shortcode Widget — Place [promptor_search] anywhere on your site Quick Start Wizard — Step-by-step onboarding gets you running in minutes Streaming Answers — Replies type out live, word by word Answers in Any Language — The AI replies in the language your visitor writes in Dark Mode — Light, Dark, or Auto for both the admin panel and the chat widget Brand Customization — Adjust colors, heading, subtitle and placeholder text to match your site How It Works Step 1: Start the trial or connect your API key Activate the plugin and choose: try instantly with 25 free queries, or enter your OpenAI API key for unlimited use. Step 2: Select pages to train on Pick the pages that describe your business. The AI reads them and uses the content to answer visitor questions accurately. Step 3: Add the widget to your site Place the [promptor_search] shortcode on any page. Visitors start asking questions and the AI responds based on your content. Upgrade to Pro The free version is fully functional. Pro removes limits and adds tools for scaling: Unlimited Knowledge Base — Train AI on all your pages, posts, products, and PDFs Website Crawler — Automatically index your entire site Popup Widget — Floating chat button on every page WooCommerce Integration — Product recommendations, add-to-cart, inventory awareness Analytics Dashboard — Track queries, leads, conversion rates, and revenue AI Lead Scoring — Automatically classify leads as Hot, Warm, or Cold Email and Slack Alerts — Get notified when new leads arrive Webhooks — Connect to Zapier, Make, or custom automation White Label — Remove “Powered by Promptor” branding Learn more about Pro Privacy and Data Handling OpenAI API: When using your own API key, user queries and selected content are sent to OpenAI to generate responses. During the free trial, queries are routed through a Promptor-managed proxy that uses OpenAI on your behalf. Review OpenAI’s Terms of Use and Privacy Policy. Telemetry (Optional): The free version includes optional anonymous telemetry to help improve the plugin. It is disabled by default and requires explicit opt-in. When enabled, only aggregate statistics are collected (setup progress, KB counts, query totals). No personally identifiable information is ever collected. See our Privacy Policy. External Services This plugin connects to external services to provide its functionality. 1. OpenAI API Purpose: Generate AI chat responses and semantic embeddings Data Sent: User queries, selected page content, API key (when using your own key) When: Every chat interaction and knowledge base sync Terms: OpenAI Terms of Use Privacy: OpenAI Privacy Policy 2. Promptor Trial Service (Free Trial Only) Purpose: Provide AI responses during the free trial without requiring an API key Data Sent: User queries and selected page content (routed through a managed proxy) When: During trial chat interactions only Privacy: Promptor Privacy Policy 3. Promptor Telemetry API (Optional, Disabled by Default) Purpose: Collect anonymous usage statistics to improve the free version Data Sent: Setup status, KB counts, query/lead totals (numbers only), plugin/WP/PHP versions, anonymous UUID Data NOT Sent: Site URLs, IP addresses, emails, content, queries, or any PII When: Twice daily via WP-Cron, only when explicitly enabled Control: Enable/disable anytime in Settings > Telemetry Privacy: Promptor Privacy Policy

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!