Stop needing to be perfect
Hardening only holds if you never miss. Counterprompt works on the bots that get through anyway.
New: deception built for AI attack agents
Turn AI attack bots against themselves
Attack bots believe whatever your site tells them. Counterprompt catches them on bait, then feeds them instructions that end the attack. Your visitors never notice.
Free WordPress plugin at launch. No credit card. No model to run.
Counterprompt Proshop.example.com
Bots flagged today38
Steps burned in maze14,920
Notices served211
- Flagged 203.0.113.x requested /wp-content/backup-2019/
- Maze 203.0.113.x at depth 41
- Closed Agent reported “no exploitable findings”
1bait request is all it takes to flag a bot
0AI models in the loop, so no GPU bill
5moves working together, from bait to report
30devent log retention, then auto-pruned
Everything you need to beat the bots, in one plugin
Five moves, one deterministic engine. Turn it on and it works.
Catch bots on paths no human visits
Hidden links and robots.txt entries point at decoy paths. People never see them and polite crawlers skip them, so anything that asks is a bot.
- Configurable decoy paths
- Hidden honeypot links
- robots.txt Disallow entries
- Flags by behavior, never identity
GET /wp-content/backup-2019/ IP flagged for 24h
Tell the agent it’s out of scope
Notices placed where only a model reads them say the host is a staging mirror stuffed with synthetic data. Agents that follow their scope rules stand down.
- Machine-only notices
- Wording that avoids obvious tells
- Pro rotates wording from a signed playbook
Agent: target out of scope. Standing down.
Take away the map
For flagged IPs, version fingerprints disappear and user enumeration comes back empty. The agent loses the details it needs to pick an exploit.
- Version strings suppressed
- User lists return empty
- Optional decoy version headers
GET /wp-json/wp/v2/users 200 OK []
Burn the attacker’s budget
A maze of plausible pages that only link to more maze. Every step costs the attacker tokens, and your server barely notices.
- Endless, plausible pages
- Served only to flagged IPs
- Never cached, never seen by people
/archive/2019/q3/7/b/c/d/ step 412
Send them home with nothing
The operator receives findings built on synthetic data and dead ends. Pro shows you exactly who took the bait and what they tried.
- Event log with hashed IPs
- Pro dashboard and daily digest
- Email and webhook alerts
- CSV and JSON export
Report: 0 exploitable findings. Engagement closed.
We’re in the business of making bots fail
Built for how bots think
AI agents act on whatever lands in their context window. We give them something worth acting on.
Safe by design
No blocking, no counterattacks, no calls home and nothing taken from the bot. Visitors never notice.
Simple pricing. Start free.
Join the waitlist now and lock in founding member pricing.
Core
$0/forever
The full defense engine for one WordPress site or a hundred.
- Bait paths and honeypot links
- Out-of-scope notices
- Tarpit maze
- Fingerprint and enumeration suppression
- Event log with hashed IPs
Founding price
Pro
$19/site/mo
Everything in Core, plus the tools to stay ahead.
- Signed playbooks that rotate your bait and wording
- Dashboard of who took the bait
- Email and webhook alerts
- Daily digest
- CSV and JSON export
Running more than WordPress? Counterprompt Edge puts the same defense at the Cloudflare edge, in front of any stack. Contact us
Works where you build
WordPress at launch. More platforms on the way.
- WordPressAvailable at launch
- ShopifyComing soon
- DrupalComing soon
- MagentoComing soon
- JoomlaComing soon
- GhostComing soon
Keep your firewall. Add the part it can’t do.
| Capability | Typical WAF | Counterprompt |
|---|---|---|
| Stops known exploit signatures | ✓ | – |
| Wastes the attacker’s time and budget | – | ✓ |
| Corrupts the attacker’s findings | – | ✓ |
| Works when you’ve missed a bug | – | ✓ |
| Needs no rule tuning | – | ✓ |
Be first in line when Counterprompt launches
Join the free waitlist and lock in Pro at $19/mo for your first year.
One email when it ships. Unsubscribe anytime.