Configuration

Configuration

Most options live under Tools → Bouncer → Settings. You need the Manage Bouncer capability (manage_bouncer).

Protection mode

• bouncer_mode — monitor or enforce (see Concepts).

Monitoring channels

Boolean options (on/off per channel), stored as WordPress options:

• bouncer_db_monitoring — Database query attribution (requires Bouncer’s db.php drop-in when no conflict exists).
• bouncer_http_monitoring — Outbound HTTP tracking and domain checks.
• bouncer_hook_auditing — Sensitive hook registration auditing.
• bouncer_file_integrity — File checksum monitoring (cron-driven, not per page view).
• bouncer_rest_monitoring — REST API–related monitoring where implemented.

AI scanning

• bouncer_ai_scanning — Master toggle for cloud AI analysis.
• bouncer_ai_api_key — API key (sanitized; also configurable via WordPress Connectors on supported versions, environment variables, or PHP constants depending on release—use what your site’s UI documents).

Details on what is sent off-site: AI and privacy.

Sampling and retention

• bouncer_sampling_rate — 0–100 (percent of requests sampled where sampling applies). Lower this on very high traffic if needed.
• bouncer_log_retention_days — 1–365 days of log retention.

Notifications

• bouncer_notify_email — Email for alerts.
• bouncer_notify_on_warning, bouncer_notify_on_critical, bouncer_notify_on_emergency — Which severities trigger email.
• bouncer_webhook_url, bouncer_webhook_secret, bouncer_webhook_min_severity — Optional outbound webhook (URL, optional secret, minimum severity).
• bouncer_digest_enabled, bouncer_digest_frequency — Email digest (daily or weekly).

Telemetry

• bouncer_community_telemetry — Optional community telemetry when offered by your build.

Bouncer Brain (local)

• bouncer_local_brain_model_path — Optional path to a local Brain helper file when you use that workflow.

For downloading and storing the Brain helper, see Bouncer Brain.

Advanced: PHP constants (wp-config.php)

Optional overrides in the main plugin bootstrap include:

• BOUNCER_BRAIN_MODEL_URL — URL for an optional large Brain model artifact (empty until you configure a release URL).
• BOUNCER_BRAIN_MODEL_SHA256 — Expected SHA-256 for that artifact.

Use these when you want to pin a download source without editing the database.

Bulk export / import

Use WP-CLI wp bouncer config export|import to move all bouncer_* options between environments.