Kinsta Introduces Bot Protection for WordPress Sites
Kinsta has unveiled a novel Bot Protection feature designed specifically for WordPress websites, accessible via its MyKinsta dashboard.
This enhancement is provided at no additional cost across all customer plans, signifying a commitment to safeguarding users without imposing extra financial burdens.
This innovative tool empowers site owners and agencies to adeptly manage automated traffic directly from the dashboard.
It effectively addresses the challenges posed by AI crawlers, dubious visitors, and other bots that frequently infiltrate WordPress environments.
Crucially, the controls are implemented at the environment level, eliminating the need for support requests or separate products.
The timing of this launch is particularly pertinent, as bot traffic increasingly constitutes a significant portion of online activity, imposing considerable challenges on WordPress administrators.
Kinsta reports that over half of all web traffic now originates from bots, with AI crawler activity surging by an astonishing 300% in the past year.
This data underscores the mounting pressures on eCommerce and search-related web pages. Notably, bots targeted add-to-cart URLs a staggering 7.67 million times within a mere 24-hour span, while one singular crawler was responsible for an eye-watering 550 million requests over the course of 30 days, according to internal records.
These relentless requests are consequential; dynamic pages—including cart pages, filtered product listings, and search URLs—utilize server resources each time they load.
Automated visits can also skew analytics reports, muddling the clarity of traffic and conversion data when blended with human interactions.
Dashboard Controls
Within the MyKinsta interface, customers can select from four predefined protection levels for each environment: Block Malicious Traffic, Block Automations, Challenge Bots, and Challenge Everyone.
The system also integrates a managed allow list covering commonly accessed WordPress paths, WooCommerce routes, and other vetted traffic, with the option for custom exceptions based on IP address, user agent, or request path.
Additionally, users have the capability to activate settings that block AI crawlers for sites intent on preventing AI indexing. CAPTCHA assessments rely on Cloudflare bot scores, while verified search engine bots, such as Google, are granted passage.
Kinsta has also instituted an emergency lockdown mode. The Challenge Everyone setting ensures accessibility for human visitors even during active attacks by imposing checks on all incoming traffic.
An analytics tab provides insights by categorizing traffic into verified bots, AI crawlers, automated interactions, and likely human visitors.
This segregation enables operators to gain a clearer understanding of site traffic, illuminating what is successfully filtered and what reaches their platforms.
Resource Strain
The broader concern for hosting entities and website administrators lies in the reality that not all automated traffic can be uniformly classified.
Search engine crawlers, plugin-related automation, and other legitimate services frequently require access, while malicious scraping, aggressive AI indexing, and repeated attempts on high-value pages can escalate costs and degrade performance.
Daniel Pataki, Chief Technology Officer at Kinsta, elaborated on this delicate balance during the announcement.
“Most bot management strategies boil down to ‘block everything’ or ‘leave it alone.’ Neither approach is sustainable at scale,” stated Daniel Pataki, Chief Technology Officer at Kinsta.
Excessive blocking can negatively impact search visibility, while inaction allows bots to deplete server resources on endpoints that will never yield conversions.
Our Bot Protection enables site owners to make informed decisions at the environment level, eliminating the necessity for engineering involvement.
We automatically manage safe traffic, ensuring that your plugins and automations remain functional regardless of the protection level in place, Pataki continued.
This launch also symbolizes a growing trepidation regarding AI crawler traffic among publishers, eCommerce managers, and webmasters generally.
As AI companies compile web content for model training and search functionalities, site owners are actively seeking more direct means to regulate which automated systems may access their content and infrastructure.
For those utilizing WordPress, concerns extend beyond content usage to infrastructure expenditures. Traffic driven towards resource-intensive endpoints can inflate hosting demands, even when those requests fail to generate sales, leads, or substantial engagement.
Roger Williams, Community Manager at Kinsta, noted that clients have perceived a disparity between their impressive traffic statistics and escalating infrastructure costs.
“Customers are expressing that their analytics present a healthy picture, yet their server expenses are continuously rising,” explained Roger Williams, Community Manager at Kinsta.
“Bot traffic is the culprit, and previously, users had little recourse apart from calling support or investing in an additional tool. Bot Protection places the reins of control directly within MyKinsta,” Williams added.
Kinsta is currently supporting over 230,000 clients across 128 nations and has added more than 65,000 new sites in 2025.
Source link: Ecommercenews.com.au.
