
Free WordPress and WooCommerce bot protection, no CAPTCHA
WebDecoy stops WooCommerce card testing, fake registrations, comment spam, login brute force and AI scrapers without showing humans a single CAPTCHA. Runs 100% locally: no account, no API key, no external calls. Deception does the heavy lifting: hidden tripwires, honeytoken links, a decoy coupon code, and fakeenv and wp-config responses seeded with canary credentials only bots ever touch. Plus invisible proof-of-work on forms and good-bot verification. Monitor mode by default. Free forever.
Pace needs two or more snapshots. This launch has 1, so velocity and momentum read as unmeasured rather than zero.
A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.