Volance Detection
Volance Detection connects your site to the Volance service. A small script records how a visitor interacts with the page. When they submit a protected form, your server passes that to Volance, which returns a human-likeness score and a recommended action (allow, flag or block). The plugin can then
Volance Detection connects your site to the Volance service. A small script records how a visitor interacts with the page. When they submit a protected form, your server passes that to Volance, which returns a human-likeness score and a recommended action (allow, flag or block). The plugin can then simply log the result, hold the submission for review, or refuse it. You choose per form.
What you can do
- Protect forms. WordPress login, registration, lost password and comments; WooCommerce login, registration and checkout; Contact Form 7; WPForms; Gravity Forms.
- Choose a mode per form. Observe (score and log only), Flag (hold comments for moderation; on other forms it logs the flag and fires a hook you can use, and never locks anyone out) or Block (refuse the submission with a clear message).
- Protect any page or REST endpoint. List paths such as /wp-json/wp/v2/comments or /pricing/* , each with its own mode. Administrators are exempt.
- See what is happening. An Overview dashboard with totals, trends and top forms, an Activity log with the evidence behind each score, and a CSV export.
- Control enforcement. Turn your Volance workspace’s enforcement on or off and see its allow and block thresholds without leaving WordPress.
- Recognise signed agents. Requests from AI agents that identify themselves with Web Bot Auth signature headers are forwarded to Volance so they can be classified as declared agents.
- Watch your usage. See your plan and how many scores you have used this month.
- Fails open. If Volance is slow, down or over quota, your forms work exactly as before.
A score is an estimate . It is not proof that someone is human or a bot.
Your secret key stays on your server. It is never printed on a page or sent to a browser.
You need a Volance account. Create one at https://app.volance.com.
Consent. You decide how visitors are informed. Use the built-in Allow / Decline notice, wire up your own consent tool, or choose “Always on” if your own privacy notice covers the script. When the built-in notice is used, nothing is collected and the Volance script is not even downloaded until the visitor clicks Allow, and a browser that sends Global Privacy Control is treated as declined.
