funnypot for WordPress
The wordpress package built on top of the funnypot security engine
by metrictower · github.com/metrictower/funnypot-wordpress · website
★ 0stars
1composer installs
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/metrictower/funnypot-wordpress/archive/refs/heads/main.zipAlso on Packagist as metrictower/funnypot-wordpress:
composer require metrictower/funnypot-wordpressFrom the readme
funnypot-wordpress 🍯
Not sure you're in the right place?
- Want a ready-to-run honeypot box to deploy → funnypot-app
- Protecting a Laravel app → funnypot-laravel
- Protecting a WordPress site → funnypot-wordpress ← you are here
- Detection and IP reporting in any PHP app, batteries included → funnypot
- Embedding the deception/detection engine in your own PHP / PSR-15 app → funnypot-core
- Querying / reporting to the IP-reputation service from code (the SDK) → funnypot-mainnet-client
- Building on the low-level decision/policy engine → funnypot-policy
A thin WordPress adapter over the metrictower/funnypot-policy decision
engine. The plugin does not decide whether a request is an attack, whether to deceive, block, or
report — that is the shared policy engine's job. D only:
1. normalizes the WP request into a neutral RequestEvidence + a WpSiteProfile (the real-route
oracle — the one job only WordPress can do),
2. asks Funnypot\Policy\PolicyEngine::evaluate() for a Decision, and
3. executes that Decision: allow/log → WordPress proceeds; deceive → emit core's byte-exact
fake and exit before the theme loads; block → emit an honest app-chosen 403.
All decision logic (c