SysWP Radar
Show HN: Server-side analytics catches AI crawlers and attackers JS misses
Last verified:
What is SysWP Radar?
SysWP Radar is a server-side, privacy-first analytics tool for WordPress sites that captures 100% of real server traffic, including AI bots (GPTBot, ClaudeBot, PerplexityBot), SEO crawlers (Ahrefs, Semrush), attackers, RSS readers, and uptime monitors—everything Google Analytics and Plausible filter out or miss entirely. Built in Brazil and hosted in Brazil, it is fully LGPD/GDPR-compliant with IP anonymization happening inside the WordPress plugin before data transmission.
Key features include real Web Vitals monitoring (LCP, CLS, INP, FCP, TTFB) using real-user monitoring data, UTM attribution, rage click detection, AI crawler tracking, behavioral security telemetry, automatic detection of WooCommerce/Elementor/Yoast SEO/Rank Math, auto-exclusion of admin pages and logged-in users, custom domain support for Pro+ plans to bypass ad-blockers, server-side beacon for capturing attacks on wp-json/xmlrpc/wp-login, zero database queries, and compatibility with cache plugins like WP Rocket and LiteSpeed Cache.
The tool is designed for bloggers and content creators who want to discover which AI crawlers are indexing their content, e-commerce stores using WooCommerce needing real channel attribution and per-product Web Vitals, agencies managing analytics for multiple client sites via a single dashboard with an Agency plan, and developers who need Web Vitals degradation alerts, automatic JS error capture, and REST API access.
Privacy & compliance features include IP anonymization (last octet zeroed for IPv4, last 80 bits zeroed for IPv6) before transmission, first-party cookies only with optional cookieless mode, Honor DNT (Do Not Track) support, no data brokers or impression auctions, servers located in Brazil, and no dependency on Google, Facebook, or ad-tech vendors.
SysWP Radar pricing
Pricing model: Freemium
Free permanent plan includes 1 site, 50K events/month, and 7-day data retention. Automatic 7-day Pro trial on signup with no credit card required. Paid plans include Pro ($19/month), Business ($99/month), and Agency ($149/month)—all plans include 7-day free trial, no credit card required. Pro+ plan adds custom domain support (analytics.yourside.com) to bypass ad-blockers. Data retention varies by plan from 7 days (Free) up to 180 days (higher-tier plans). Agency plan allows managing multiple client sites in a single dashboard.
SysWP Radar pros
- Captures 100% of server traffic including bots and attackers that GA4/Plausible miss
- Detects AI crawlers (GPTBot, ClaudeBot, PerplexityBot) in real time
- Server-side analytics with zero impact on page load speed
- Real User Monitoring for actual Web Vitals (LCP, CLS, INP) from real visitors
- Fully LGPD/GDPR-compliant with IP anonymization before transmission
- Free permanent plan with 1 site and 50K events/month
- 7-day Pro trial included on signup with no credit card required
- Works with ad-blockers as traffic appears as simple image request
- Custom domain support on Pro+ plan bypasses aggressive ad-blockers completely
- Auto-detects WooCommerce, Elementor, Yoast SEO, Rank Math, Contact Form 7
- Auto-excludes admin pages, AJAX, REST API, cron jobs, logged-in editors
- Zero database queries—settings stored in wp_options
- Compatible with WP Rocket, W3 Total Cache, LiteSpeed Cache, Cloudflare APO
- Server-side beacon captures attacks JS pixel cannot see (wp-json, xmlrpc, wp-login)
- Agency plan allows managing multiple client sites in single dashboard
- REST API access for developers with Web Vitals degradation alerts
- Cookieless mode toggle available—typically no cookie banner needed
- UTM attribution and rage click detection included
SysWP Radar cons
- Only works with WordPress sites via plugin
- Detection only—does not block AI crawlers (requires robots.txt or security plugin)
- Free plan limited to 1 site only
- Free plan has 7-day data retention (paid plans have longer retention up to 180 days)
- Custom domain support requires Pro+ plan (not on Free or standard Pro)
- No multisite network-wide tracking—each subsite needs separate Site ID
- WordPress.org plugin name changed from SysWP Radar to SysRadar (confusion risk)
- No mobile app or mini-dashboard in WP admin yet (roadmap for v1.2 Q3 2026)
- Server-side events feature (for aggressive ad-blockers) coming in v1.4 Q4 2026
- Block AI crawlers feature not yet available (planned for v1.4)
Frequently asked questions about SysWP Radar
Will the plugin slow down my site?
No. The JavaScript is asynchronous, under 2KB minified, and the server responds in sub-millisecond time. Nothing blocks rendering. The tool honors a zero impact on LCP/FCP contract—you can verify this on the Web Vitals panels in the SysRadar dashboard after installing.
Does it work with WP Rocket / LiteSpeed Cache / Cloudflare?
Yes. The snippet is static and works inside any page cache. It has been tested in production with WP Rocket and LiteSpeed Cache, and is compatible with W3 Total Cache and Cloudflare APO.
Can I use it with ad-blockers?
Most ad-blockers allow it because the traffic is interpreted as a simple image request (.gif). If you need maximum accuracy and have the Pro+ plan, you can configure a custom domain (e.g., analytics.yoursite.com), which makes ad-blockers completely blind to the tracking.
Is there a free tier?
Yes. There is a permanent Free plan with 1 site, 50K events/month, and 7-day retention. An automatic 7-day Pro trial is included on signup with no credit card required.
What happens if I uninstall the plugin?
Events already collected stay in SysRadar subject to your plan's retention policy. New visitors will not be tracked. The plugin's settings (Site ID, etc.) remain in wp_options until you delete the plugin via Plugins > Delete—at that point the included uninstall.php cleans them up automatically.
Does it collect personal data (LGPD/GDPR)?
No. The plugin collects only User-Agent, visited URL, referrer, and browser performance metrics (LCP/FCP/TTFB/CLS/INP). IPs are anonymized inside the plugin before transmission—last octet zeroed for IPv4, last 80 bits zeroed for IPv6. No name, email, cross-site tracking cookies, or any personally identifiable information ever leaves your WordPress install.
Do I need a cookie banner to use SysRadar?
It depends on your configuration and jurisdiction. With Cookieless mode ON, SysRadar does not set any cookies and you typically do not need a cookie consent banner for SysRadar specifically. With Cookieless mode OFF (default), SysRadar sets two first-party cookies for unique-visitor counting, and under strict LGPD/ePrivacy interpretation you should ask visitors for consent. The server-side beacon does not set cookies and runs under legitimate interest in security monitoring—consent is not required, only disclosure in your privacy policy.
What does Honor DNT actually do?
DNT stands for Do Not Track—a header (DNT: 1) that the visitor's browser sends to tell websites please do not track me. When you enable Honor DNT in SysRadar, the plugin checks for this header on every request and skips tracking entirely (both pixel and beacon) for visitors that send it. LGPD does not require honoring DNT, but it is a strong privacy signal and best practice, recommended if you have EU traffic.
How do I know it's working?
After pasting the Site ID and saving, visit your site in an incognito tab. The dashboard at radar.syswp.com.br/dashboard shows the event in real time with a 5-10 second delay.
Can I block AI crawlers via the plugin?
No—SysWP Radar detects AI crawlers, it does not block them. To block AI crawlers, you need to use robots.txt or a dedicated security plugin focused on bot blocking. The block AI crawlers feature is planned for version 1.4 in Q4 2026.