Bot Protection works out of the box for most websites, but sometimes you will want to let a specific person, app or bot through, or switch protection off for one site. All of these are done in cPanel under "Security" -> "Bot Protection."
Turn Bot Protection on or off for one site
Open the "Sites" tab and click the On/Off switch (1) next to that site. Domains shown together in one row share the same website files, so they share the same setting.
Never challenge your own IP address (or an office network)
Open the "IPs" tab. Click your address next to "Your current address is" (1) to fill it in, choose "Allow" (2), and click "Add" (3). You can also type a range such as 198.51.100.0/24.
Let an app, API or webhook through
Software that talks to your site (payment gateways, mobile apps, feed readers) cannot pass the browser check. Open the "URLs" tab and, under "Never challenge these URLs" (1), enter the address it uses (for example /api/) (2) and click "Add" (3).
Common WordPress and WooCommerce paths such as the REST API, admin-ajax.php, RSS feeds and WooCommerce payment callbacks are already allowed for you.
Allow or block a specific bot
Open the "Bots" tab, find the bot by name, choose "Allow" or "Block," and click "Apply." Search engines, link previews (Facebook, Slack, etc.) and common uptime monitors are allowed by default.
Turn it off completely
On the "Overview" tab select "Off" and click "Apply." Your settings are kept for next time. To remove Bot Protection from your account entirely, use the "Remove Bot Protection" button at the bottom of the "Overview" tab.
Related Bot Protection Articles
You can find these in the Bot Protection category of our knowledgebase:
- Getting Started with Bot Protection
- What Visitors See and Reference Codes
- Bot Protection Settings Explained
- Troubleshooting Bot Protection
Need More Help?
If you have questions about Bot Protection or something isn't working the way you expect, please open a support ticket from our Client Area and our team will be happy to help. To help us get you an answer quickly, please include:
- The website (domain) affected.
- Any Reference code shown on a blocked page.
- Roughly when it happened and what you or your visitor were trying to do.
