BotShield

Version History

== Changelog ==
= 2.5.2 =
Tightens Monitor mode so automatic Worker policies only monitor unless explicitly blocked by the administrator

= 2.5.2 =
* Prevented automatic unknown Cloudflare Worker Challenge or Block policies from enforcing while global mode is Monitor.
* Preserved administrator-blocked Worker zones as explicit manual enforcement in Monitor mode.

= 2.5.1 =
Adds a dedicated Discovery Surfaces control center for Sitemap, RSS feed, and REST API monitoring.

= 2.5.1 =
* Added Discovery Surfaces under Protection for Sitemap, RSS feed, and REST API monitoring.
* Added per-surface controls, top discovery identities, and recent discovery events.
* Added a dedicated Sitemap monitoring switch and connected it to sitemap protection.
* Added Discovery Surfaces to Protection cards, Overview enabled status, settings, rules, portability, and uninstall cleanup.

= 2.5.0 =
* Added Recent Post Scrapers under Threats for suspicious visits to newly published posts.
* Stored post ID, recent-post status, and post age with request logs.
* Added the recent-post scraper surface to Overview monitoring coverage.
* Added a configurable recent-post window under Settings.
* Moved front-end request analysis to template resolution so post context is available to detectors.

= 2.4.1 =
* Prevented automatic AI crawler blocking while global protection mode is Monitor.
* Prevented unknown-Worker Challenge or Block policies from enforcing while global mode is Monitor.
* Prevented Phoenix Challenge or Block policies from enforcing while global mode is Monitor.
* Prevented limited, fake, or blank scraper responses while global mode is Monitor.
* Preserved explicit administrator decisions for blocked IPs, fingerprints, browser patterns, countries, and Worker zones.

= 2.4.0 =
* Added verified Cloudflare Worker subrequest detection using trusted transport, CF-Worker, and cross-zone Worker signals.
* Added Allow, Monitor, Challenge, and Block policies for unknown Worker zones.
* Added trusted and blocked Worker-zone lists under Network settings.
* Added Worker-zone actions and status synchronization in Identity Center.
* Added Cloudflare Worker fields to request logs and the database schema.
* Added Worker visibility to Overview, Live Activity, Activity logs, and Identity Center.
* Added Worker settings to configuration portability and uninstall cleanup.

= 2.3.2 =
* Connected every front-end protection hook to the active-license requirement.
* Connected the Request Logging switch to the logger, visitor beacon, and Session Intelligence.
* Required DNS verification for Googlebot and Bingbot before generic trusted-bot bypass.
* Added positive and negative caching for verified crawler DNS checks.
* Added uninstall cleanup for verified-crawler cache entries.
* Connected the bad-agent rule to device risk scoring.
* Reduced coarse fingerprint-only IP-rotation weight to require stronger corroborating signals.
* Corrected Overview content-marker totals to count protected articles.

= 2.3.1 =
* Replaced Blocklist Center cards with one unified identity table.
* Added Identity, Location, Activity, Top Pages, Risk, Status, User agent, Last seen, and Action columns.
* Added row actions to block, challenge, trust, or clear restrictions for an identity.

= 2.3.0 =
Adds a unified Blocklist Center for managing IP, fingerprint, browser-pattern, country, and challenge-only rules.

== Changelog ==

= 2.3.0 =
* Added a unified Blocklist Center under Protection.
* Added synchronized add and remove controls for blocked IP addresses, fingerprints, browser patterns, countries, and challenge-only IPs.
* Added validation, nonce protection, conflict handling, entry totals, and responsive list cards.

= 2.2.0 =
* Added blocking and monitoring coverage for known AI scraping crawlers.
* Added session intelligence for cross-IP fingerprint rotation, rapid traversal, missing browser beacons, and sequential URL enumeration.
* Expanded WordPress content API monitoring to pages, media, comments, taxonomy, users, search, type discovery, and oEmbed routes.
* Connected all Detection Rule switches to their corresponding scoring paths.
* Added configuration portability and Overview telemetry for the new protection systems.

= 2.1.9 =
Recommended dashboard update. Adds smarter monitoring coverage, dedicated sitemap/feed/REST visibility, and more accurate threat and challenge totals.

== Changelog ==

= 2.1.9 =
* Redesigned Overview around traffic, threat rate, and intervention rate.
* Added a visual traffic-decision summary.
* Added monitoring coverage for sitemap, RSS feeds, REST API, behavior detection, headless browsers, and content traps.
* Added event reasons to Live Activity for clearer investigation.
* Prevented duplicate threat-signal counting when one request matches multiple detectors.
* Included JavaScript challenge events in challenge totals.
* Improved responsive dashboard presentation.

-country blocker added 
-Bot block with fingerprint
-bot challenge added
-Trust bot Added