A rule is one thing WP Moo looks for in a page's answer, like a database error or a page that got too big. Rules come in four rule sets. Every page check runs the sets that are on for that page, all on the same request, so they cost no extra requests and nothing to set up. A few pages start with a set off: the checkout skips Search engines, and the login page and sitemap skip Search engines and Speed & size, because they stay out of search results and are small on purpose.
The four rule sets
What happens when a rule fails
Switching a rule set off
Checker blocked is not a rule set
For your developer
All rules judge the facts of the page's single GET request: the response body, status, timings, size, redirect count, the TLS certificate and robots directives. Body rules are regular expressions on the first 512 KB of the decoded body. Time to first byte and total time are judged on the median of the page's runs over a window that grows as the site priority drops (5 minutes for Critical, 30 for Low), so one slow run doesn't count, unless the page's interval is as long as the window or longer: then a single run can.
A run is blocked when a known block page (Cloudflare, including its access denied codes such as 1020, Wordfence, Imunify360, Sucuri) answers with an error status, or Cloudflare or SiteGround sends its challenge header, whatever the rules found. A 429, or a 401 or 403 that mentions a bot check, is a block too, unless the same answer shows an Urgent failure page: then it counts as a failure.
Something unclear on this page? Email [email protected]