Directory / plugin

getReport

v2.2.3 · by mariosmode

See which AI crawlers visit (verified), which AI assistants send you visitors, and how quotable every post is. Plus one-click fixes with Undo. Free.

About this plugin

getReport is a free, donation-funded website checkup. This plugin brings it into WordPress, with the parts that matter for AI search: ChatGPT, Perplexity, Claude, Gemini and Copilot. There is no Pro version and nothing is locked.

Everything below runs on your own site. Nothing is sent anywhere unless you turn it on.

AI audit of every post

  • Every published post and page is scored for how easily AI assistants can find, understand and quote it: is the answer near the top, are there specific facts, are the headings questions, is it readable, does it show a date and an author, is it blocked in robots.txt or noindexed.
  • A few pages are also fetched the way crawlers see them, without JavaScript, to catch content that only appears after scripts run.
  • Results table with filters (worst first, stale, needs JavaScript, answer too low), an “AI score” column in your post lists, and a list of the issues across the site with why they matter and how to fix them.
  • Checks come with an evidence label (strong, mixed, weak), so you fix what is proven to matter first.

Editor panel

  • A getReport panel in the block editor scores your post as you type, in your browser: quotability, the answer in the first third, question headings, facts, readability, sources.
  • A coloured dot beside each paragraph shows which ones an AI would quote.
  • Set the question each post answers; the checks use it.

AI crawler analytics, verified

  • See GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-Extended, Applebot, Amazonbot, Bytespider, CCBot and more: visits per day, pages crawled, and errors or blocks they got.
  • Each visit is checked against the IP addresses the company publishes. Bots that only pretend to be GPTBot are counted separately as fake.
  • Choose per bot whether robots.txt lets it in: keep AI search bots, block training bots if you prefer.
  • Page cache active? Import your server’s access log to see the visits the cache answered.
  • A one-click access test shows whether a firewall or CDN turns AI bots away, with where to look in Cloudflare, Wordfence, Sucuri and others.

AI referral traffic

  • See how many visitors ChatGPT, Perplexity, Gemini, Copilot, Claude and others send you, and to which pages.
  • Off until you turn it on. A script under 1 KB runs only for visitors who come from an AI assistant. No cookies, no IP address, no user id, so no consent banner is needed.
  • A ready-made regular expression for an “AI assistants” channel in Google Analytics 4.

One-click fixes, each with Undo

  • Show “Updated” dates on posts, and an author box (with the matching markup when no SEO plugin prints it).
  • Choose which AI bots may crawl (robots.txt).
  • Tell Bing about new and updated posts (IndexNow).
  • Organisation facts (name, founding year, address, phone, profiles) as Organization and WebSite markup, when no SEO plugin already adds it.
  • An optional llms.txt (labelled weak evidence, honestly).
  • Security headers, XML-RPC off, the REST user list hidden from visitors, attachment pages kept out of search results, “Discourage search engines” turned off, the demo content removed, WooCommerce cart fragments limited to the cart.

The plugin never edits theme files, .htaccess, wp-config.php or another plugin’s settings. Every fix remembers what it replaced, Undo restores it, and every change is logged. Deleting the plugin undoes every fix.

Your getReport website report

Connect to see your getreport.app scores (speed, SEO, security, accessibility, structured data, social previews and best practices) in WordPress. Connect also confirms the site is yours and gets it a free key automatically, so you can run checks from WordPress, get a re-test after each fix and an optional weekly email. The key can only check your own site.

External services

The plugin works without any of these. Each one starts only after you turn it on, and you can turn it off again.

  • getreport.app, after you click Connect (getReport Website report):
    • Confirming the site is yours (once, when you click Connect or “Get the key automatically”): your host name is sent to https://api.getreport.app/api/v1/domains/{your-host}/verify, which answers with a short code. The plugin publishes that code at /.well-known/getreport.txt and in a meta tag on your home page, then calls https://api.getreport.app/api/v1/domains/{your-host}/plugin-key; getReport reads the code from your site and answers with a key that can check your site only. The code stays published while you are connected; Disconnect removes it.
    • Your latest scores: your site’s host name is sent to https://api.getreport.app/api/v1/domains/{your-host} when you open the getReport screens or the dashboard, at most every 10 minutes.
    • Checks and re-tests (with your site’s key): your home page address and your API key are sent to https://api.getreport.app/api/v1/reports when you click Check now, after you apply or undo a fix, and once a week if you turn the weekly email on. getReport then fetches your public home page like a visitor would.
    • Terms: https://getreport.app/terms · Privacy: https://getreport.app/privacy
  • The bot IP lists, after you turn on “Keep bot lists up to date” (Settings Crawlers): once a day WordPress downloads the lists the companies publish. Nothing about your site is sent. The addresses are: https://openai.com/gptbot.json, https://openai.com/searchbot.json, https://openai.com/chatgpt-user.json (OpenAI: https://openai.com/policies/terms-of-use), https://www.perplexity.ai/perplexitybot.json, https://www.perplexity.ai/perplexity-user.json (Perplexity: https://www.perplexity.ai/hub/legal/terms-of-service), https://developers.google.com/static/search/apis/ipranges/googlebot.json, .../special-crawlers.json, .../user-triggered-fetchers.json (Google: https://policies.google.com/terms), https://www.bing.com/toolbox/bingbot.json (Microsoft: https://www.microsoft.com/servicesagreement), https://search.developer.apple.com/applebot.json (Apple: https://www.apple.com/legal/internet-services/terms/site.html), https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6 (Cloudflare: https://www.cloudflare.com/website-terms/). Without it, the lists shipped with the plugin are used.
  • IndexNow, after you apply the IndexNow fix: when you publish or update a post, its address, your host name and a random key are sent to https://api.indexnow.org/indexnow, which shares them with Bing, Yandex and other search engines. Terms: https://www.indexnow.org/terms
  • Links you click: “Check with getReport” and “Check now on getreport.app” open getreport.app in your browser with the page’s address.

Post content, visitor data and personal data never leave your site.

Plugin tags