Security advisorywp2shell Monday check: confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Monitor WordPress AI plugin activity with Grumpy AI Gate

Grumpy AI Gate shows which WordPress plugins talk to AI providers, logs usage locally, and can block selected WordPress AI Client flows.

Topics Hardening & checklists

Lars Koudal

Lars Koudal

Updated Published

I built Grumpy AI Gate while working on the AI Security Advisor for WP Security Ninja. WordPress is gaining more AI-capable plugins. Visibility into who is calling which provider was missing.

Grumpy AI Gate

What it does

  • Sees which plugin is involved in AI-related outbound activity
  • Keeps a local request log and per-plugin overview
  • Optionally blocks selected plugins that use WordPress AI Client flows
  • Stores data in your WordPress database (no cloud dashboard, no phone-home)

It is strongest as a visibility tool. It is not a full outbound firewall for every HTTP request a plugin might make. That honesty matters.

Why bother

Once AI features spread, the useful questions become practical: which plugin is calling out, how often, which provider, and do you want that plugin doing it at all? API bills, quotas, and privacy reviews show up quickly.

The first name was “AI Usage Monitor.” WordPress.org preferred something less generic. Grumpy AI Gate stuck: watch AI usage, question it, block when needed.

Who it is for

Site owners, agencies, and developers who want local oversight of AI plugin activity. If every plugin may talk to every provider unchecked, you can skip it.

Download: wordpress.org/plugins/grumpy-ai-gate. Broader site baseline: WordPress security checklist.

Related video

Watch how Grumpy AI Gate monitors AI plugin activity in WordPress.

Found this useful? Share it.

Larger screenshot