getReport

getReport is a free, donation-funded website checkup. This plugin brings it into WordPress, with the parts that matter for AI search: ChatGPT, Perplexity, Claude, Gemini and Copilot. There is no Pro version and nothing is locked.

Everything below runs on your own site. Nothing is sent anywhere unless you turn it on.

AI audit of every post

• Every published post and page is scored for how easily AI assistants can find, understand and quote it: is the answer near the top, are there specific facts, are the headings questions, is it readable, does it show a date and an author, is it blocked in robots.txt or noindexed.
• A few pages are also fetched the way crawlers see them, without JavaScript, to catch content that only appears after scripts run.
• Results table with filters (worst first, stale, needs JavaScript, answer too low), an «AI score» column in your post lists, and a list of the issues across the site with why they matter and how to fix them.
• Checks come with an evidence label (strong, mixed, weak), so you fix what is proven to matter first.

Editor panel

• A getReport panel in the block editor scores your post as you type, in your browser: quotability, the answer in the first third, question headings, facts, readability, sources.
• A coloured dot beside each paragraph shows which ones an AI would quote.
• Set the question each post answers; the checks use it.

AI crawler analytics, verified

• See GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-Extended, Applebot, Amazonbot, Bytespider, CCBot and more: visits per day, pages crawled, and errors or blocks they got.
• Each visit is checked against the IP addresses the company publishes. Bots that only pretend to be GPTBot are counted separately as fake.
• Choose per bot whether robots.txt lets it in: keep AI search bots, block training bots if you prefer.
• Page cache active? Import your server’s access log to see the visits the cache answered.
• A one-click access test shows whether a firewall or CDN turns AI bots away, with where to look in Cloudflare, Wordfence, Sucuri and others.

AI referral traffic

• See how many visitors ChatGPT, Perplexity, Gemini, Copilot, Claude and others send you, and to which pages.
• Off until you turn it on. A script under 1 KB runs only for visitors who come from an AI assistant. No cookies, no IP address, no user id, so no consent banner is needed.
• A ready-made regular expression for an «AI assistants» channel in Google Analytics 4.

One-click fixes, each with Undo

• Show «Updated» dates on posts, and an author box (with the matching markup when no SEO plugin prints it).
• Choose which AI bots may crawl (robots.txt).
• Tell Bing about new and updated posts (IndexNow).
• Organisation facts (name, founding year, address, phone, profiles) as Organization and WebSite markup, when no SEO plugin already adds it.
• An optional llms.txt (labelled weak evidence, honestly).
• Security headers, XML-RPC off, the REST user list hidden from visitors, attachment pages kept out of search results, «Discourage search engines» turned off, the demo content removed, WooCommerce cart fragments limited to the cart.

The plugin never edits theme files, .htaccess, wp-config.php or another plugin’s settings. Every fix remembers what it replaced, Undo restores it, and every change is logged. Deleting the plugin undoes every fix.

Your getReport website report

Connect to see your getreport.app scores (speed, SEO, security, accessibility, structured data, social previews and best practices) in WordPress. Connect also confirms the site is yours and gets it a free key automatically, so you can run checks from WordPress, get a re-test after each fix and an optional weekly email. The key can only check your own site.

External services

The plugin works without any of these. Each one starts only after you turn it on, and you can turn it off again.

• getreport.app, after you click Connect (getReport → Website report):
  • Confirming the site is yours (once, when you click Connect or «Get the key automatically»): your host name is sent to https://api.getreport.app/api/v1/domains/{your-host}/verify, which answers with a short code. The plugin publishes that code at /.well-known/getreport.txt and in a meta tag on your home page, then calls https://api.getreport.app/api/v1/domains/{your-host}/plugin-key; getReport reads the code from your site and answers with a key that can check your site only. The code stays published while you are connected; Disconnect removes it.
  • Your latest scores: your site’s host name is sent to https://api.getreport.app/api/v1/domains/{your-host} when you open the getReport screens or the dashboard, at most every 10 minutes.
  • Checks and re-tests (with your site’s key): your home page address and your API key are sent to https://api.getreport.app/api/v1/reports when you click Check now, after you apply or undo a fix, and once a week if you turn the weekly email on. getReport then fetches your public home page like a visitor would.
  • Terms: https://getreport.app/terms · Privacy: https://getreport.app/privacy
• The bot IP lists, after you turn on «Keep bot lists up to date» (Settings → Crawlers): once a day WordPress downloads the lists the companies publish. Nothing about your site is sent. The addresses are: https://openai.com/gptbot.json, https://openai.com/searchbot.json, https://openai.com/chatgpt-user.json (OpenAI: https://openai.com/policies/terms-of-use), https://www.perplexity.ai/perplexitybot.json, https://www.perplexity.ai/perplexity-user.json (Perplexity: https://www.perplexity.ai/hub/legal/terms-of-service), https://developers.google.com/static/search/apis/ipranges/googlebot.json, .../special-crawlers.json, .../user-triggered-fetchers.json (Google: https://policies.google.com/terms), https://www.bing.com/toolbox/bingbot.json (Microsoft: https://www.microsoft.com/servicesagreement), https://search.developer.apple.com/applebot.json (Apple: https://www.apple.com/legal/internet-services/terms/site.html), https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6 (Cloudflare: https://www.cloudflare.com/website-terms/). Without it, the lists shipped with the plugin are used.
• IndexNow, after you apply the IndexNow fix: when you publish or update a post, its address, your host name and a random key are sent to https://api.indexnow.org/indexnow, which shares them with Bing, Yandex and other search engines. Terms: https://www.indexnow.org/terms
• Links you click: «Check with getReport» and «Check now on getreport.app» open getreport.app in your browser with the page’s address.

Post content, visitor data and personal data never leave your site.

1. In WordPress, go to Plugins → Add New Plugin, search for getReport, click Install Now, then Activate.
2. Open getReport in the left menu (near the bottom, below Settings).
3. Click Run site audit. It reads your posts on your own server.
4. Optional: turn on referral tracking, choose your AI crawler rules, apply the fixes you want, and connect to getreport.app for your website report.

The full documentation, with every screen, every fix and what is sent when, is at getreport.app/wordpress/docs.

Does it slow my site down?

No. For visitors, the plugin adds one small database write when a known AI bot visits, and nothing else unless you turn fixes or referral tracking on. The audit runs in the background in small batches.

Where do I find it?

In the left menu, under getReport. The AI score of each post is also a column in Posts and Pages, and the editor has a getReport panel (the dial icon at the top right).

Why do visits from ClaudeBot show an asterisk?

Anthropic, Meta, Amazon and some others do not publish their crawler IP addresses, so those visits cannot be verified. They are counted, and marked as unverifiable.

My site uses a page cache. Are visits missing?

Probably: cached pages are served without running WordPress. The AI crawlers screen detects the common cache plugins and lets you import your server’s access log to fill the gap.

Can a fix break my site?

Each fix changes one thing and remembers the old value. If something looks wrong, click Undo. The security headers never add includeSubDomains or preload, which could affect other sites on your domain.

Is getReport free?

Yes. It is funded by donations; there are no paid tiers and no Pro version.

What happens when I delete the plugin?

Deleting it undoes every fix first, so your site is as it was, and removes the connection, the key and the scheduled tasks. The collected data and settings are deleted too if you tick «Also delete the collected data» in Settings → Privacy. Deactivating removes nothing.

Where can I get help?

Read the documentation, then ask in the support forum with your plugin and WordPress versions (getReport → Settings → Advanced). For anything private, write to hello@getreport.app.

2.2.3

• Hardening from the WordPress.org review: every screen escapes its output as it prints it, every database query uses placeholders for table names, and robots.txt paths come from WordPress.
• Server-log import reads plain and gzipped logs the same way.

2.2.2

• Documentation and Support links on the Plugins screen, in the screen footers and under Settings → Advanced.

2.2.1

• The getReport menu now sits in the usual place for plugins, below Settings, instead of at the top.

2.2.0

• Help on every screen: a link to that screen’s section of the new documentation at getreport.app/wordpress/docs.
• When getreport.app cannot confirm your site, a link explains how to fix it.

2.1.1

• Connect: the automatic key no longer fails with «Unsupported Media Type».

2.1.0

• Connect now confirms the site is yours and gets it a free key automatically: Check now, re-tests after fixes and the weekly email work from WordPress, without emailing for a key. The key can only check your own site.

2.0.1

• Website report: sites at www.… now find their getreport.app scores (getReport files them without www.).
• Clearer message when getreport.app has no finished check yet; it is re-asked after a minute instead of ten.

2.0.0

• New getReport menu with Overview, AI audit, AI crawlers, AI referrals, Fixes, Website report and Settings.
• AI audit of every post, with a live getReport panel and paragraph dots in the block editor, and an AI score column in post lists.
• AI crawler analytics verified against published IP lists, robots.txt rules per bot, access test, firewall hints and server-log import.
• AI referral tracking without cookies, and a GA4 channel regex.
• New fixes: «Updated» dates, author box, AI bot rules in robots.txt, IndexNow, organisation facts in the markup, optional llms.txt. Every fix is logged.
• Requires WordPress 6.2.

1.0.0

• First release: scores in the dashboard, «Check with getReport», eight one-click fixes with Undo, re-tests and the weekly email.