This page is designed to help you find out whether SysWP Radar is good and if it is the right choice for you.
SysWP Radar is server-side analytics that captures every request — humans, AI crawlers, search bots, scanners, attackers. Unlike Google Analytics, Plausible or Fathom (JavaScript-only, blind to non-browser traffic), Radar works server-side and sees everything.
🌐 Works on any website via a 1×1 tracking pixel — same simplicity as the JS analytics you already know.
⚡ First-class on WordPress. The official plugin adds a server-side beacon for /wp-json/, xmlrpc.php, /wp-admin/ probes, wp-login.php — exactly where attackers and AI crawlers operate. JS analytics simply don't see these requests.
Free tier: 1 site, 50k events/month, no credit card required.
Paid plans from $9/month (R$29/mês). Every signup gets 7 days of Pro free.
Founder offer: first 100 paying customers lock in 50% lifetime discount on any plan + 2 free months on annual.
Listed in
Tracking method
Server-side (1×1 tracking pixel + WordPress plugin with server-side beacon)
Bot detection
9 automatic categories — humans, verified bots, AI crawlers, SEO crawlers, RSS readers, health checks, WP internals, attackers, unknown
AI crawler tracking
Yes — GPTBot, ClaudeBot, PerplexityBot, Amazonbot, Bytespider, OAI-SearchBot, Google-Extended, and more
Attack detection
Real-time — sqlmap, wpscan, nuclei, masscan, brute-force, REST enumeration. Deterministic bot scoring with 4 independent rule families
WAF rule suggestions
Heuristic suggestions ready for one-click deploy to SysWP Shield
WordPress coverage
Pixel + server-side beacon for /wp-json/, xmlrpc.php, /wp-admin/ probes, wp-login.php
Real User Monitoring
Core Web Vitals from production — LCP, FCP, TTFB, CLS, INP
UTM attribution
Yes — full UTM + channel attribution + Web Vitals per URL
Alerts engine
14 alert types × 5 detection modes × 5 channels (email, webhook, Slack, Discord, Telegram). Quiet hours, cooldown, digest, escalation
AI Dashboard Explainer
Plain-English summary of your traffic (Pro+). Privacy-safe input — no IPs or URLs sent to the LLM
Multilingual UI
English, Português (BR), Español
Privacy compliance
LGPD / GDPR — no cookies, no consent banners
IP handling
Anonymized at ingest (last octet zeroed before storage)
JavaScript dependency
None for core tracking
REST API access
Yes (Pro+)
Cache plugin compatibility
WP Rocket, LiteSpeed Cache, W3 Total Cache, Cloudflare APO
Performance impact
Zero on LCP/FCP (async pixel + beacon fires after response via fastcgi_finish_request)
Sites included
1 (Free) · 3 (Starter) · 20 (Pro) · 50 (Agency)
Radar is in public beta launching May 2026, so we don't yet have public reference customers to disclose. Early access users include WordPress agencies and independent publishers in Brazil, with the public launch focused on the Brazilian agency market before expanding to LATAM and English-speaking customers, but its LATAM and English-speaking customers ready
Founding-tier slots are open during the launch window — case studies will be published as early customers reach milestones.
Radar is the only privacy-first analytics platform built server-side from the ground up that simultaneously answers three questions Google Analytics can't:
Who's actually visiting? — Server-side pixel + classifier separates humans, search crawlers, AI bots (GPTBot, ClaudeBot, PerplexityBot), and attackers in real time. GA misses ~30-40% of your traffic because it's client-side JS — bots don't execute JS.
Who's attacking you right now? — Detects WordPress probes (wp-login.php, xmlrpc.php, /wp-json/), reconnaissance scans, and bot floods. Surfaces top attackers, attack patterns, and per-IP/per-session drill-downs.
Should I block them? — When an attack alert fires, Radar uses an LLM to synthesize a defensive WAF rule, validates it against your last 7 days of legitimate traffic ("site-scoped Red Team"), and lets you approve it with one click — pushing it to SysWP Shield.
No other product does all three. Plausible/Fathom do #1 (humans only). Cloudflare does #2 (no analytics). No one does #3.
Sees what GA can't: Server-side means you catch GPTBot, ClaudeBot, PerplexityBot, sqlmap, scrapers — none of which run JavaScript. Critical in 2026 as AI crawlers become a meaningful share of traffic.
LGPD/GDPR compliant by default: No cookies, no PII, no consent banner needed. Brazilian DPO registered, data residency in São Paulo.
Dual-purpose: It's analytics AND a security telemetry layer. One pixel replaces GA + a basic bot-detection tool.
Price: Starter at $5/mo (R$29 in Brazil) — about half the cost of Plausible/Fathom for richer data.
WordPress supercharger: Works on any site, but the optional WP plugin adds attack-pattern detection, login-probe alerts, and a 1-click integration with SysWP Shield (WAF) — a stack no competitor offers.
1- WordPress agencies and freelancers managing 5–50 client sites. They need to (a) prove traffic value to clients, (b) catch security incidents before they become breaches, and (c) replace GA without losing visibility. Brazil-first, expanding LATAM and English-speaking markets.
2- SaaS founders, content publishers, and bloggers who care about privacy compliance (LGPD/GDPR), want to know how often AI bots are scraping their content, and don't want to maintain a GA + bot-protection stack separately.
3- Security-conscious developers running personal projects who want server-side analytics without a Google account.
SysWP Radar is the entry product of the SysWP trinity — three SaaS tools built for the WordPress ecosystem: Shield (WAF), Pulse (uptime/performance), and Radar (traffic intelligence).
The founder kept hitting the same problem at agency clients: Google Analytics showed clean traffic graphs while the server logs were full of wp-login.php brute-force attempts, xmlrpc.php probes, and AI scrapers eating bandwidth. GA literally can't see any of it — it's client-side JavaScript, and attackers/bots don't execute JS. So clients thought they were safe while their servers were on fire.
Radar started as the answer: a server-side pixel that sees everything, classifies it intelligently, and — critically — closes the loop with Shield to actually block the bad actors. Brasil-first because the WordPress agency scene there is huge and underserved by US-priced tools, with the architecture designed from day one to scale internationally with locale-aware pricing.
The flywheel matters: every alert in Radar can become a Shield rule, validated by AI against the site's own legitimate traffic. Cross-tenant caching means when one site sees a sqlmap attack, all 100 sites get the synthesized rule.
Backend: PHP 8 (vanilla, no framework), PSR-4 autoload Database: MySQL 8 / MariaDB with partitioned tables for hot pixel data Frontend: Tailwind CSS, ECharts for visualizations, vanilla JS (no SPA framework) Web server: Apache with .htaccess routing Email: n8n webhooks (no provider keys in the SaaS itself — all transactional mail via webhook → Mailgun/SES) Geo IP: Cloudflare CF-IPCountry header → cached fallback to ip-api.com AI/LLM: OpenRouter (Claude 3.5 Haiku for rule synthesis, ~$0.008 per synthesized rule) Billing: Stripe (cURL direct, no SDK), locale-aware pricing in BRL/USD Security integration: HMAC-SHA256 signed cross-product API calls with SysWP Shield Hosting: Brazilian VPS (data residency for LGPD), Cloudflare in front
We have collected here some useful links to help you find out if SysWP Radar is good.
Check the traffic stats of SysWP Radar on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of SysWP Radar on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of SysWP Radar's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of SysWP Radar on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about SysWP Radar on Reddit. This can help you find out how popualr the product is and what people think about it.
Next 14 days: pause on features, push on distribution. Link: https://radar.syswp.com.br. - Source: dev.to / 6 months ago
Do you know an article comparing SysWP Radar to other products?
Suggest a link to a post with product alternatives.
Is SysWP Radar good? This is an informative page that will help you find out. Moreover, you can review and discuss SysWP Radar here. The primary details have not been verified within the last quarter, and they might be outdated. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
This is good.
We built Radar after years of watching our WordPress sites get hammered by AI crawlers and attackers that Google Analytics, Plausible, and Fathom completely ignored. JavaScript-only analytics is great for human visitors — but 30-60% of your traffic isn't human, and that traffic is your hosting bill, your security risk, and (now) your AI search visibility. Radar captures all of it server-side, without breaking Core Web Vitals or requiring a cookie banner. Free tier is real — no credit card, no expiration. The first GPTBot or sqlmap hit usually shows up within minutes of install. We're a small team based in Brazil — happy to help with setup or answer questions at aporce@syswp.com.br.