Title: EchoFilter — Lead Quality Filter
Author: eugeniodev
Published: April 21, 2026
Last modified: April 21, 2026
---
Search plugins
# EchoFilter — Lead Quality Filter
By [eugeniodev](https://profiles.wordpress.org/eugeniodev/)
[Download](https://downloads.wordpress.org/plugin/echofilter-lead-quality-filter.1.0.0.zip)
* [Details](https://vec.wordpress.org/plugins/echofilter-lead-quality-filter/#description)
* [Reviews](https://vec.wordpress.org/plugins/echofilter-lead-quality-filter/#reviews)
* [Installation](https://vec.wordpress.org/plugins/echofilter-lead-quality-filter/#installation)
* [Development](https://vec.wordpress.org/plugins/echofilter-lead-quality-filter/#developers)
[Support](https://wordpress.org/support/plugin/echofilter-lead-quality-filter/)
## Description
EchoFilter protects your WordPress forms from bots and spam using behavioral biometrics—
analyzing mouse movement, typing patterns, and timing to distinguish real users
from automated submissions.
**How it works:**
1. Install the plugin and enter your EchoFilter API key
2. EchoFilter silently analyzes every visitor’s behavior
3. On form submit, it scores the session (0–100 TrustScore)
4. Bots get blocked. Real users get through instantly.
**No CAPTCHAs. No friction. No false positives.**
**Compatible with:**
* Contact Form 7
* WPForms
* Gravity Forms
* Elementor Forms
* Ninja Forms
* Any standard HTML form
**Three protection modes:**
* **Block** — Bot submissions are rejected with an error message (recommended)
* **Flag** — Bot submissions go through but with a hidden `_echofilter_bot=1` field
* **Log** — Monitor mode: all submissions allowed, bots logged in your dashboard
### External Services
This plugin connects to **echofilter.com** to analyze form submissions and load
the detection SDK. This is the core functionality of the plugin and cannot be disabled
while the plugin is active.
**What is sent:**
* Behavioral signals: mouse movement patterns, keystroke timing,
form fill duration * Whether a paste action was detected * A one-way hash of the
visitor’s IP address (raw IP is never stored or transmitted) * User-agent string
**What is NOT sent:**
* Form field values or any user-submitted content * Names,
emails, or any personally identifiable information from your visitors
**When data is sent:**
Data is transmitted only when a visitor submits a form on
your site and you have entered a valid API key.
**External service links:**
* Service: [echofilter.com](https://echofilter.com)*
Terms of Service: [echofilter.com/terms](https://echofilter.com/terms) * Privacy
Policy: [echofilter.com/privacy](https://echofilter.com/privacy)
## Installation
1. Upload the plugin to `/wp-content/plugins/echofilter/`
2. Activate it in **Plugins Installed Plugins**
3. Go to **Settings EchoFilter**
4. Enter your API key from [echofilter.com/dashboard](https://echofilter.com/dashboard)
5. Save — your forms are now protected
## FAQ
### Do I need an EchoFilter account?
Yes. Sign up free at echofilter.com — the Free plan covers up to 1,000 checks/month.
### Will this affect my real users?
No. EchoFilter runs silently in the background. Real users never see any extra steps.
### Does it work with page builders?
Yes — it protects any `