Zero Budget Bot Shield

Yes. Zero Budget Bot Shield blocks countries without using any third-party IP lookup or geolocation API. The plugin reads country codes directly from GeoIP headers already provided by your infrastructure, such as:

• Cloudflare IP country headers
• Hosting provider GeoIP headers
• Server-level GeoIP integrations

Yes. If your site is behind Cloudflare, the plugin automatically uses Cloudflare’s country header to detect visitor location. There is no additional configuration required beyond having Cloudflare enabled on your domain.

Yes, provided your hosting environment supplies GeoIP country headers. Many managed WordPress hosts and VPS setups already expose these headers at the server level. If no GeoIP headers are detected, the plugin will clearly notify you in the admin dashboard.

If GeoIP headers are not present, country-based blocking will not activate. However:

• 404 abuse protection will continue to function normally
• No errors or site breakage will occur
• The plugin will display a clear status notice in the admin panel

404 abuse protection defends your site against bots that repeatedly request non-existent URLs. Zero Budget Bot Shield monitors repeated 404 responses per IP and automatically blocks abusive requests when configurable thresholds are exceeded. This helps reduce:

• Unnecessary server load
• Log pollution
• Bot-driven crawling and probing

Yes. You can configure:

• Maximum allowed 404 requests
• Time window for detection

Absolutely. Zero Budget Bot Shield is designed for minimal resource usage. It does not:

• Load front-end scripts or styles
• Run background cron jobs
• Query external services
• Use heavy JavaScript frameworks

No. When configured correctly, the plugin adds negligible overhead. Because it relies on existing request headers and simple conditional logic, performance impact is minimal compared to API-based security plugins.

No personal data is stored. The plugin records aggregated block statistics by country and reason only. Individual IP addresses are not logged, stored, or exported. This makes the plugin suitable for privacy-conscious sites.

Yes. Because no personal data is transmitted to third-party services and no IP addresses are stored, the plugin aligns well with privacy regulations such as GDPR. Always consult your legal advisor for compliance requirements specific to your site.

No. Zero Budget Bot Shield is completely free. All features are included, enabled, and usable without:

• Subscriptions
• Licenses
• Upgrade prompts
• Hidden limitations

No API keys are required. This plugin does not connect to external services and does not transmit visitor data off-site. There are no accounts to create, no services to sign up for, and no usage quotas.

Yes. Blocked event statistics can be exported as a CSV file directly from the WordPress admin area for reporting or analysis.

Yes. The plugin is well-suited for shared hosting environments due to its low resource usage and absence of background processes.

Yes. Zero Budget Bot Shield:

• Uses WordPress Settings API
• Uses nonces and capability checks
• Avoids bundled third-party libraries
• Follows WordPress.org plugin review guidelines

This plugin is ideal for:

• Small businesses
• Non-profits and community organizations
• Personal websites and blogs
• Developers who prefer self-contained tools
• Sites needing geo blocking without paid services

Zero Budget Bot Shield relies on GeoIP country headers provided by your web server or CDN. Many modern hosting providers already enable GeoIP by default, so no action is required in most cases. If GeoIP headers are not detected, and your host supports Apache GeoIP or GeoIP2, you may be able to enable it by adding a simple directive to your .htaccess file. GeoIPEnable On After saving the file, refresh your WordPress admin page and revisit the plugin settings. If GeoIP headers are available, the plugin will automatically begin detecting visitor countries. Important notes:

• Not all hosting environments support GeoIP via .htaccess
• Some managed hosts enable GeoIP globally and do not allow manual configuration
• If you are unsure, contact your hosting provider and ask whether GeoIP or GeoIP2 headers are enabled
• If you are using Cloudflare, GeoIP headers are enabled automatically on supported plans
• The plugin will clearly indicate in the admin area whether GeoIP headers are detected, so you always know if country-based blocking is active.