Georix – GEO & AI Citation

See whether AI engines can quote your pages — and fix it with one block.

ChatGPT, Perplexity and Google’s AI answers now answer many of your customers’ questions directly. They quote short, clear passages from sites they can read and trust. Georix shows you, from your own server’s data, whether that is happening for your site, and gives you simple tools to improve it. No coding, no account and no API key needed.

After activation, open Georix → Start here. Three steps get you to a first result in a few minutes, and a guided tour shows every section with a real example.

Set up once (no account needed)

• llms.txt, llms-full.txt and ai.txt — generated for you and live within seconds of saving. Nothing to upload.
• Local Business schema — address, phone and opening hours for 100+ business types (Dentist, Law Firm, Restaurant, CA Firm and more).
• AI Crawlers — allow or block GPTBot, ClaudeBot, PerplexityBot, Google-Extended and others, written straight to robots.txt.
• Organization, Article and Breadcrumb schema — added to your pages automatically.

Improve your pages (no account needed)

• Answer Capsules — a worklist showing which pages an AI engine could quote, and a block to publish a short, direct answer where it can’t.
• Query Explorer — type a keyword, tick question words (how, what, cost…), and copy a ready-made regex into Google Search Console. Copy and paste only; nothing is connected.
• Answer Booster and GEO Content Audit — editor panels that flag unsourced statistics, weak openings and missing structure while you write.
• FAQ and HowTo blocks with a niche-aware question suggester.

Measure — fills up over time (no account needed)

• AI Traffic — real visits that ChatGPT, Perplexity, Gemini, Copilot and others send to your pages.
• AI Crawler Cost — what AI bots request from your server, and what they send back.
• Reality Check — an honest check of whether your setup is actually being used, even when the answer is “not yet”.
• Verified Bot Identity — spots fake “GPTBot” traffic with reverse-DNS checks.
• Health and AEO Score — a checklist of anything blocking AI engines, plus a site-wide readiness score.

Optional

• Click Drop Finder (formerly “Lost to AI”) — finds question searches that still show up in Google but are getting fewer clicks than before. This is the only feature that needs a connection: a Google Search Console service-account key. It is off by default, and everything else works without it.

Who it is for

Local service businesses (clinics, law firms, accountants, restaurants, salons), bloggers and publishers, SaaS and product sites, and agencies managing client sites.

Honest by design

Georix only shows numbers it can prove from your own data. For example, Google has confirmed it does not use llms.txt — we still generate it because it is free and may matter later, and Reality Check tells you whether anything actually requests it.

No data leaves your server except where described under Privacy and External services below (DNS lookups for bot verification, and the optional Search Console connection).

Privacy

This plugin does not collect, store, or transmit personal data to the plugin author’s servers. Crawler visit logs (bot name, user agent, IP address, timestamp) are stored only in your WordPress database when logging is enabled. All other processing happens on your own site.

AI Traffic Insights (new in 1.1): this feature records only the AI source (for example “ChatGPT”), the landing page path, a UTC date, and a coarse visit count. It does not store IP addresses, does not store raw user-agent strings, and strips query strings from referrers. This data is stored only in your own site’s database and is never transmitted anywhere. It is preserved if you uninstall unless you explicitly opt in to removal.

Answer Booster (new in 1.1): all content analysis runs locally on your own server. Your content is never sent to any external service, and no analysis results are stored.

AI Crawler Cost Report (new in 1.2): stores only per-day, per-bot aggregate counts (bot name, vendor, request count, an estimated byte figure, and a date). It does not store IP addresses or raw user agents. Bandwidth is an estimate — crawler requests multiplied by a rolling average HTML response size sampled from your own site — and is always labelled as an estimate.

Verified Bot Identity (new in 1.2): to confirm a crawler is genuine, the plugin performs reverse-DNS and forward-DNS lookups on the crawler’s IP address, and compares it to IP ranges bundled locally with the plugin. This runs only on a scheduled task, never during a visitor page load. A raw IP is written to a verification queue row only while the check is pending and is deleted the moment the check completes — only the verdict (verified / unverified) and the resolving organisation are kept. No raw IP is ever shown in the admin UI or included in any CSV export. The wording is always “unverified”, never “fake”.

Answer Capsule Engine (new in 1.3): every Liftability Check runs locally on your own server. Your content is never sent anywhere. The only things stored are the target question you typed and the cached verdict, both in your own database as post meta.

Click Drop Finder, formerly “Lost-to-AI Question Finder” (new in 1.3): opt-in and off by default. When connected it retrieves your own Google Search Console rows (query, page, date, impressions, clicks, average position) and stores them in your own database. No page content, visitor data or personal data is sent to Google — only a date range and the dimensions requested. Requests run on a daily scheduled task or when you click Refresh, never on a visitor page load. Credentials are encrypted at rest where the server supports it, deleted on disconnect and always deleted on uninstall. See External services below for the full disclosure.

External services

This plugin does not send site content or personal data to the plugin author’s servers or to third-party APIs.

Google Search Console API (new in 1.3, opt-in, off by default)

The Click Drop Finder is the only feature in Georix that contacts a third-party service, and it does nothing at all until you explicitly connect it.

• What is sent: a signed request to Google’s OAuth token endpoint (https://oauth2.googleapis.com/token) to obtain a short-lived access token from the service-account key you pasted, and then queries to the Google Search Console API (https://searchconsole.googleapis.com/) for your own verified property. Each API request body contains only a date range, the dimensions being requested (date, query, page), a row limit and a paging offset. No page content, no visitor data, no personal data and no IP addresses are sent.
• When it is sent: only on a daily scheduled task, and when you click “Refresh data”. Never on a visitor page load, and never on an ordinary admin page load. Responses are cached for 12 hours.
• What is stored: your own Search Console rows (query, page, date, impressions, clicks, average position) in a new table in your own database, plus your service-account credentials, encrypted at rest with the server’s sodium or openssl extension where available. If neither extension exists, the screen tells you plainly that the credentials are stored as ordinary text.
• Disconnecting: one click. Stored credentials and the cached access token are deleted immediately, and the scheduled task is removed. On uninstall the credentials are always deleted; the stored Search Console data is preserved unless you opt in to removal.
• Google’s terms apply to this API: Google APIs Terms of Service and the Google Privacy Policy. Service: Google Search Console API, provided by Google LLC.

Answer Capsule Engine (new in 1.3, no external service)

All Liftability Check analysis runs locally on your own server against your own rendered content. Nothing is sent anywhere and no analysis result leaves your database.

Site health checks (your own site only)

When you click “Check File Status” or when the Health panel runs validation, the plugin makes HTTP requests from your WordPress install to your own site’s public URLs (for example /llms.txt and /robots.txt). These self-requests confirm that discovery files are reachable. No data is sent to external servers. The Reality Check “visibility” check (new in 1.2) works the same way — it requests your own homepage only, to count the words a crawler can see.

Bot identity verification (new in 1.2, DNS only, your own database)

To confirm a crawler is genuine, Verified Bot Identity performs standard DNS lookups (reverse DNS on the crawler’s IP, then a forward DNS lookup to confirm it) using your server’s resolver. These are DNS queries, not data transfers — no site content or personal data is sent anywhere. IP ranges used for the check are bundled with the plugin and refreshed with each release; the plugin does not fetch them from any external service. All verification runs on a scheduled task, never on a visitor request.

WPML / Polylang (optional, if installed)

If WPML or Polylang is active, the plugin reads language configuration from those plugins locally to group llms.txt output by locale. The plugin does not make additional outbound requests to WPML or Polylang services beyond what those plugins already do on your site.

Bot documentation links (admin reference only)

The AI Crawlers admin tab lists known crawlers with links to each provider’s public documentation (for example OpenAI GPTBot, Google crawlers, Anthropic, Amazonbot). These are display-only reference URLs in the WordPress admin. The plugin does not connect to those services or transmit your site data to them.