Loading…
WordPress & WooCommerce security plugin
Gate House Free protects supported WordPress and WooCommerce forms with built-in keyless checks or your preferred CAPTCHA. Add Pro for repeated-abuse controls, card-testing checks, account cleanup and detailed activity.
Pro founding price: $19.95 per site per year for the first 1,000 sites
Security for the forms your visitors use
Gate House helps protect your site from automated sign-ups, spam and repeated attempts. Choose the guide for your site to see the supported forms and how to set them up.
Free adds keyless checks or your own CAPTCHA to native login, registration, password reset and comment forms. Pro adds attempt limits, disposable-email screening, Contact Form 7 and WPForms integration.
Explore WordPress security protection →Free checks supported classic and Block checkout, account, payment and review forms. Pro adds card-testing signals, held-order review and suspicious-account cleanup that preserves order history.
Explore WooCommerce security protection →Gate House Free & Pro
Protect your forms with Free. Choose Pro for advanced abuse controls, detailed activity and help from the people who build Gate House.
Compare every featureFor everyday form spam protection.
$0
No account, license or credit card required.
Free protection does not expire. Updates come through WordPress.org.
For stores and sites that need more control.
$19.95/ site / year
Billed yearly and renews automatically. Keep your founding price while subscribed; cancel renewal anytime.
Why Gate House exists
Gate House started on our own WooCommerce store, the morning we learned what a passed check doesn’t cover.
Over 500 accounts appeared in a few hours. The CAPTCHA kept reporting humans while bots created account after account — and fake orders came through behind it, a green checkmark on every one.
Then our payment processor flagged us. Enough junk orders will do that. Suddenly this wasn’t about spam anymore — the store’s ability to take payments at all was in question.
The cleanup outlasted the attack. It took hours of combing through accounts and orders to separate real customers from fakes — with nothing to say which were safe to remove.
Free starts with checks on supported forms. Pro adds abuse controls that a passed CAPTCHA cannot override, held-order review and account cleanup that preserves order history.
Gate House Pro · Account controls
Free checks supported form submissions. Pro adds limits on repeated attempts and checks for suspicious account patterns; a passed CAPTCHA cannot override a Pro abuse block.
Use built-in keyless checks, or connect Turnstile, reCAPTCHA or hCaptcha with your own provider keys.
Set limits on how often someone can try a login, sign-up or checkout.
Gate House Pro · Store defense
Pro adds configurable checks for repeated totals, small-order bursts and payment failures your gateway recorded. These checks run locally alongside the form protection included in Free.
Every threshold is configurable and Observe mode is the default. A matched pattern is a fraud signal to review, not a verdict on any card — keep your payment processor’s fraud tools in place. See the full store protection.
Gate House Pro · Account cleanup
Pro includes a review workflow for accounts already on your site: find sign-ups worth checking, see why each was flagged and decide what happens in WordPress. Account cleanup is not included in Free.
Quarantine temporarily restricts an account: it signs the customer out and blocks supported sign-in and checkout flows. The account and orders stay intact, and you can restore access after your review.
Preview suspicious sign-ups from a date range. See the reason each account was flagged without changing anything.
Check the account and its order history, then select the accounts you want to restrict. A flag is a reason to investigate, not a verdict.
Restrict only the accounts you decide need it. Restore access if a restriction was a mistake or is no longer needed. Gate House records each action.
Orders are never deleted by cleanup. Permanent account deletion is a separate action with a 24-hour wait and checks for existing orders and content. See deletion requirements.
How it works
Choose your form checks in WordPress, test the visitor journey, then decide whether you need advanced controls.
Download Gate House Free from WordPress.org. Built-in keyless checks need no Gate House account, license or CAPTCHA-provider keys.
Choose Off, Invisible or Human check for supported forms. External human checks need your own provider keys and a connection test. Test real submissions and sandbox payment journeys before enabling checkout checks.
Install the matching Pro add-on alongside Free for configurable attempt limits, account-abuse checks and detailed activity. Keep both plugins active; Free also works on its own.
Seen in wp-admin
Screens from our WordPress test store. Coverage is included in both editions; held-order review and the Protection Test are Pro tools.
Captured on our isolated WordPress test store with demo data. Pro adds its tabs and controls to the shared dashboard.
Coverage
Free protects supported native WordPress and WooCommerce forms. Pro adds Contact Form 7 and WPForms integrations, plus advanced limits and abuse controls.
Test your forms and payment methods on a staging copy of your site before turning on blocking. Custom checkouts and express wallets need separate review. Check compatibility and requirements.
Use Observe mode and detailed Activity to review advanced abuse signals before enforcing your rules.
Select Off, Invisible or Human check for each supported form. Pro adds configurable attempt limits.
Send labeled diagnostic probes at your own site to check supported guards. The report does not replace testing real visitor and payment journeys.
See which supported forms are enabled and which have been confirmed by successful visits. Test your forms and payment methods as part of setup.
Review individual attempts and their recorded reasons in detailed local Activity. Free includes aggregate blocked-attempt totals.
An active license includes email support from the people who build Gate House. Free support is available through the WordPress.org forum.
You stay in control
Gate House Pro toolkit
Pro adds the advanced tools below to Free. Built-in keyless checks and optional CAPTCHA integrations remain included in both editions.
Choose Light, Balanced or Strict limits to curb repeated requests. These checks run on your site and don’t need a CAPTCHA account.
Temporarily tighten limits on the forms being targeted. Choose 15, 30 or 60 minutes; Gate House returns to your usual limits afterward.
Built-in keyless spam checks use a signed proof, honeypot and minimum submission time. External human checks use your own Turnstile, reCAPTCHA or hCaptcha keys. These form checks are included in Free.
See where an attempt happened and why it was flagged or blocked. Review unexpected results from the same WordPress dashboard.
FAQ
Still unsure whether Gate House fits your site? Ask the people who build it at support@gatehousewp.com.
Free includes built-in keyless spam checks, optional Turnstile, reCAPTCHA and hCaptcha, supported native WordPress and WooCommerce forms, form coverage, the provider connection test and blocked-attempt totals. It has no trial period and needs no Gate House account or license. Updates come through WordPress.org.
Pro adds configurable attempt limits, visitor rules, account-abuse and card-testing checks, account cleanup, detailed Activity and the Protection Test. It also adds Contact Form 7 and WPForms integrations. Keep Free active and install the matching Pro add-on from your account. Compare Free and Pro for the complete feature list.
Yes. Existing founding and lifetime licenses include the Pro add-on under their existing terms; you do not need a second license. Sign in to your account for eligible downloads. If you use the older complete edition, follow the migration instructions before switching.
The founding subscription is billed yearly per site and renews automatically until you cancel. Choose 1–10 production sites and keep your founding price while continuously subscribed. Updates and email support continue through the paid term; installed local protection keeps working afterward. Cloud services require an active license and explicit opt-in. You can still download releases your license is eligible for after expiry.
No keys are needed for the built-in keyless checks in either edition. If you choose external human checks, use your own Turnstile, reCAPTCHA or hCaptcha account and keys, then complete the provider connection test. Pro’s local abuse controls do not need CAPTCHA keys either.
Both editions support native WordPress forms and supported WooCommerce forms, including classic checkout and Checkout Blocks. Contact Form 7 and WPForms need Pro. Requirements are WordPress 7.1+, PHP 8.1+ and, for WooCommerce integrations, WooCommerce 11.1.2+. Test real form and sandbox payment journeys; custom forms, express wallets and headless routes need separate assessment. See the .
Download Free with no Gate House account or license. Add Pro for $19.95 per site per year, billed annually. Pro founding pricing is limited to the first 1,000 sites.
One subscription can cover 1–10 sites. Pro is a separate add-on: install and keep Free active alongside it.
Pro purchases include a 30-day money-back guarantee.
Founding pricing is available for the first 1,000 sites. Cancel renewal anytime.
Look for generated-profile patterns, repeated identities and disposable email domains.
Review suspicious patterns first, then choose what to block.
Start with Free’s form checks and coverage. Add Pro for detailed activity, advanced controls and diagnostic probes when your site needs them.
If your connected CAPTCHA is unreachable or over quota, enforced forms verify the built-in fallback instead of failing your visitors. Every fallback decision is recorded — and strict sites can choose to fail closed instead.
Create allow, block or challenge rules for an IP address, IP range, email or email domain. Abuse-protection blocks still apply. Add a rule from an Activity row; the log never stores a readable email or IP.
A dashboard widget shows the last 24 hours of decisions and blocks. An optional weekly summary email — off by default, totals only — is sent by your own site, never a third party.
Your activity log stays on your server. Gate House keeps passwords, card details and full addresses out of that log.
Check connection and storage health, then share a diagnostic report with support. Credentials are left out of the report.
Use wp gate-house commands for status, rules, attack mode, activity exports and coverage. Pro includes these command-line tools; changes are audited like administrator actions.
Pro includes translations in German, Spanish, French and Brazilian Portuguese, with English for any untranslated text. Free uses WordPress.org language packs, whose availability depends on community translations.
Free support is available through the WordPress.org support forum. An active Pro license includes email help with installation, configuration and troubleshooting. You can also ask us about your site before choosing.
Each Pro license includes up to five qualifying staging or local copies in addition to its production-site allowance. See the test-site requirements. Pro purchases and renewals have a 30-day money-back guarantee.