Title: Volance Detection Author: Volance Published: 7 اکتبر 2026 Last modified: 13 اکتبر 2026 --- جستجوی افزونه‌ها ![](https://ps.w.org/volance-detection/assets/banner-772x250.png?rev=3733336) ![](https://ps.w.org/volance-detection/assets/icon.svg?rev=3733336) # Volance Detection توسط [Volance](https://profiles.wordpress.org/thisissohard002/) [دانلود](https://downloads.wordpress.org/plugin/volance-detection.2.0.0.zip) * [جزئیات](https://fa.wordpress.org/plugins/volance-detection/#description) * [نقد و بررسی‌ها](https://fa.wordpress.org/plugins/volance-detection/#reviews) * [نصب](https://fa.wordpress.org/plugins/volance-detection/#installation) * [توسعه](https://fa.wordpress.org/plugins/volance-detection/#developers) [پشتیبانی](https://wordpress.org/support/plugin/volance-detection/) ## توضیحات Volance Detection connects your site to the Volance service. A small script records how a visitor interacts with the page. When they submit a protected form, your server passes that to Volance, which returns a human-likeness score and a recommended action( allow, flag or block). The plugin can then simply log the result, hold the submission for review, or refuse it. You choose per form. **What you can do** * **Protect forms.** WordPress login, registration, lost password and comments; WooCommerce login, registration and checkout; Contact Form 7; WPForms; Gravity Forms. * **Choose a mode per form.** _Observe_ (score and log only), _Flag_ (hold comments for moderation; on other forms it logs the flag and fires a hook you can use, and never locks anyone out) or _Block_ (refuse the submission with a clear message). * **Protect any page or REST endpoint.** List paths such as `/wp-json/wp/v2/comments` or `/pricing/*`, each with its own mode. Administrators are exempt. * **See what is happening.** An Overview dashboard with totals, trends and top forms, an Activity log with the evidence behind each score, and a CSV export. * **Control enforcement.** Turn your Volance workspace’s enforcement on or off and see its allow and block thresholds without leaving WordPress. * **Recognise signed agents.** Requests from AI agents that identify themselves with Web Bot Auth signature headers are forwarded to Volance so they can be classified as declared agents. * **Watch your usage.** See your plan and how many scores you have used this month. * **Fails open.** If Volance is slow, down or over quota, your forms work exactly as before. A score is an **estimate**. It is not proof that someone is human or a bot. Your secret key stays on your server. It is never printed on a page or sent to a browser. You need a Volance account. Create one at https://app.volance.com. **Consent.** You decide how visitors are informed. Use the built-in Allow / Decline notice, wire up your own consent tool, or choose “Always on” if your own privacy notice covers the script. When the built-in notice is used, nothing is collected and the Volance script is not even downloaded until the visitor clicks Allow, and a browser that sends Global Privacy Control is treated as declined. ### External services This plugin connects to the Volance service, operated by Oops Games LLC, to estimate whether a form submission came from a human, an agent or a bot. **1. Volance script (visitor’s browser).** On pages with a protected form or path, and once consent is given (or immediately if you chose “Always on”), the visitor’s browser downloads and runs https://app.volance.com/trace.js. It makes no network requests of its own. Downloading it reveals the visitor’s IP address and browser details to Volance’s servers, as any web request does. **2. Volance scoring API (your server).** When a protected form or path receives a submission, your server sends Volance a request to https://app.volance.com/api/ trace/session and then https://app.volance.com/api/trace/score, authenticated with your workspace keys. The request contains: * interaction timing, pointer movement, wheel and scroll timing, key press timing( never which keys) and coarse browser and device descriptors recorded by the script; * the visitor’s IP address, which Volance stores only as a one-way hash; * only if your workspace has the fingerprint tier on: a blank-canvas test result, the installed font count and the graphics renderer name; * the visitor’s request headers: User-Agent, Accept-Language, Sec-CH-UA, Sec-Fetch- Site / Sec-Fetch-Mode, the order of the header names, proxy-related headers, whether a cookie was present (yes or no, never its value) and, for signed agents, the Web Bot Auth signature headers; * for a protected path, the page path (without query string). It never contains typed characters, form values, clipboard contents, page text or cookie values. **3. Volance account calls (administrators).** The Test connection button, the plan and usage tab, and the workspace policy panel call https://app.volance.com/api/trace/ config (read and, when you save the enforcement setting, update), /session and / usage from your server with your keys. A scheduled task also checks your workspace settings twice a day. Token verification (https://app.volance.com/api/trace/verify- token) is available to developers through the plugin’s code only. Volance Terms: https://volance.com/terms Volance Privacy Policy: https://volance. com/privacy ## عکس‌های صفحه [⌊Overview: totals, trends and top forms.⌉⌊Overview: totals, trends and top forms .⌉[ Overview: totals, trends and top forms. [⌊Activity log with the evidence behind each score.⌉⌊Activity log with the evidence behind each score.⌉[ Activity log with the evidence behind each score. ## نصب 1. Upload the plugin to `/wp-content/plugins/volance-detection`, or install it from the Plugins screen. 2. Activate it. 3. Go to **Settings > Volance Detection > Setup**. Paste your public key (`pk_...`) and secret key (`sk_...`) from the Volance portal and click **Test connection**. 4. Choose a mode for each form (start with _Observe_), pick how consent is handled, and tick **Turn on**. 5. Watch the **Overview** and **Activity** tabs, then move forms to _Flag_ or _Block_ when you are happy with the results. If you prefer, define `VOLANCE_DETECTION_SECRET_KEY` in `wp-config.php` instead of saving the secret key in the database. ## سوالات متداول ### Does this plugin block bots? Only if you tell it to. Every form starts in _Observe_ mode, which never changes what a visitor sees. Switch a form to _Flag_ or _Block_ to act on Volance’s recommendation. In _Flag_ mode a suspicious comment is held for moderation; on other forms the flag is logged and the `volance_detection_flagged` action fires, but nothing is refused. Flag and Block only act while enforcement is switched on in your Volance workspace( Setup tab); with it off, or paused because your monthly quota is used up, Volance still scores and the plugin logs the recommendation. ### What happens if a real person gets blocked? Blocking follows the allow and block thresholds set by Volance (currently 70 and 40), and only while enforcement is on for your workspace. A blocked visitor sees a short message and can try again. Administrators are never blocked on protected paths. Start in Observe or Flag mode and review the Activity log before using Block. ### What if a visitor’s browser sends no evidence? By default the submission is allowed and logged as “No browser evidence”. You can instead have Volance score it anyway. ### What exactly is sent to Volance? For a submission to a protected form or path: interaction timing, pointer movement, wheel and scroll timing, key press timing (never which keys), coarse browser and device details, the visitor’s IP address, and request headers (User-Agent, Accept- Language, Sec-CH-UA, Sec-Fetch, the order of the request headers, proxy-related headers, whether a cookie was present as a yes/no flag, and any Web Bot Auth signature headers). For protected paths the page path is also sent. Volance stores the IP address only as a one-way hash. See the External services section. ### Does it use fingerprinting? Not by default. Like the Volance website’s install snippet, the plugin follows your Volance workspace setting. Only if you switch the fingerprint tier on in the Volance portal does the page script also read whether a blank canvas test passes, how many fonts are installed and the name of the graphics renderer, and send those with the submission. The plugin shows a notice on its Setup tab while the tier is on, and adds a sentence about it to the consent notice. Turning the tier on or off makes the built-in notice ask every visitor again. If you turn the tier off, the plugin stops collecting and sending those fields; it can take up to 12 hours for the page script to notice, and the plugin removes the fields before sending in the meantime. ### What is never collected? The characters a visitor types, form values, clipboard contents, page text and cookie values. The plugin and the Volance service both reject content-bearing fields. Fingerprinting is off unless you switch on the fingerprint tier in your Volance workspace (see the next question). ### How do I ask visitors for consent? Use the built-in Allow / Decline notice, choose “Use my own consent tool” and call` window.volanceDetection.setConsent(true)` when a visitor agrees (and `false` if they decline or withdraw), or choose “Always on”. You can also dispatch a `volance- detection:consent` event on `document` with `{ detail: { granted: true } }`. ### Can developers hook in? Yes. Actions: `volance_detection_decision`, `volance_detection_flagged`, `volance_detection_blocked`. Filters: `volance_detection_block_message`, `volance_detection_skip_user`, `volance_detection_load_collector`,` volance_detection_visitor_ip`. ### How long is data kept? This plugin’s log is deleted after 30 days. Volance deletes raw scores and sessions after 30 days; see its privacy policy. ### I use a proxy or CDN. Will the visitor IP be right? By default the plugin sends `REMOTE_ADDR`. If your site sits behind a trusted proxy, return the real address from the `volance_detection_visitor_ip` filter. ### Will it slow my forms down? In _Observe_ mode scoring runs after the response has been sent on servers that support it (PHP-FPM and LiteSpeed). In _Flag_ and _Block_ modes the submission waits for the score, up to a 3 second limit per call with no retries, and then fails open. ### What happens when I uninstall? The plugin removes its settings, log table and scheduled task. Data already stored by Volance is managed in the Volance portal. ### Which features are not in the plugin yet? Session lists, the audit log, team members and billing are available in the Volance portal at https://app.volance.com. Agent monetization (402 pay-per-request) is planned for a later plugin release; see https://volance.com/docs/agent-monetization. The Help tab links to these. ## نقد و بررسی‌ها نقد و بررسی‌ای برای این افزونه یافت نشد. ## توسعه دهندگان و همکاران “Volance Detection” نرم افزار متن باز است. افراد زیر در این افزونه مشارکت کرده‌اند. مشارکت کنندگان * [ Volance ](https://profiles.wordpress.org/thisissohard002/) [ترجمه “Volance Detection” به زبان شما.](https://translate.wordpress.org/projects/wp-plugins/volance-detection) ### علاقه‌ مند به توسعه هستید؟ [کد را مرور کنید](https://plugins.trac.wordpress.org/browser/volance-detection/)، [مخزن SVN](https://plugins.svn.wordpress.org/volance-detection/) را بررسی کنید، یا از طریق [RSS](https://plugins.trac.wordpress.org/log/volance-detection/?limit=100&mode=stop_on_copy&format=rss) در [گزارش توسعه](https://plugins.trac.wordpress.org/log/volance-detection/) مشترک شوید. ## گزارش تغییرات #### 2.0.0 * New: Flag and Block modes per form, in addition to Observe. * New: protect WooCommerce login, registration and checkout; Contact Form 7; WPForms; Gravity Forms; and lost password. * New: protected paths for any page or REST endpoint, with a mode per path. * New: Overview dashboard, evidence for each activity entry, CSV export and a Help tab. * New: turn workspace enforcement on or off from WordPress and see the fixed allow and block thresholds. Flag and Block only act while workspace enforcement is on. * New: forward Web Bot Auth signed-agent headers so declared agents are recognised. * New: option to score submissions that arrive without browser evidence, and an“ Always on” consent mode. * New: hooks `volance_detection_decision`, `_flagged`, `_blocked` and filters ` volance_detection_block_message`, `_skip_user`, `_load_collector`. * New: fingerprint tier support, identical to the Volance install snippet. Off by default; only when the workspace turns it on does the page script read a blank- canvas test, the installed font count and the graphics renderer name. The Setup tab shows a notice and the consent notice mentions it. #### 0.1.0 * First release: settings, consent notice, observe-only scoring of login, registration and comment forms, activity log, plan and usage line. ## اطلاعات * نگارش **2.0.0** * آخرین به‌روزرسانی **5 روز پیش** * نصب‌های فعال **کمتر از 10** * نگارش وردپرس ** 6.0 یا بالاتر ** * آزمایش‌شده تا **7.1.3** * نگارش PHP ** 8.0 یا بالاتر ** * زبان * [English (US)](https://wordpress.org/plugins/volance-detection/) * برچسب * [ai agents](https://fa.wordpress.org/plugins/tags/ai-agents/)[bot detection](https://fa.wordpress.org/plugins/tags/bot-detection/) [form security](https://fa.wordpress.org/plugins/tags/form-security/)[login protection](https://fa.wordpress.org/plugins/tags/login-protection/) [spam](https://fa.wordpress.org/plugins/tags/spam/) * [نمایش پیشرفته](https://fa.wordpress.org/plugins/volance-detection/advanced/) ## امتیازها هنوز هیچ نقدی ارسال نشده است. [بررسی شما](https://wordpress.org/support/plugin/volance-detection/reviews/#new-post) [مشاهدهٔ همهٔ بررسی‌ها](https://wordpress.org/support/plugin/volance-detection/reviews/) ## مشارکت کنندگان * [ Volance ](https://profiles.wordpress.org/thisissohard002/) ## پشتیبانی چیزی برای گفتن دارید؟ نیاز به کمک دارید؟ [مشاهده انجمن پشتیبانی](https://wordpress.org/support/plugin/volance-detection/)