Product · Protection layers
Layered checkout protection, with limits you can understand.
Checkout Firewall evaluates flow, velocity, challenge results, and payment feedback before choosing to allow, challenge, or block.
Core engine
Six signals. One explainable decision.
Each layer covers a different failure mode. No card data enters the engine, and every decision carries a reason.
Layer 1
Checkout-flow proof
A legitimate checkout requests a short-lived signed token bound to its session, cart, and checkout surface. Direct requests that skip the expected flow can be challenged or blocked.
Limit: It proves the expected flow—not a human—and is not enough by itself.
Layer 2
Local automation evidence
A randomized honeypot and signed render-time evidence add supporting signals without contacting a third party or blocking by themselves.
Limit: Sophisticated browser automation can imitate these signals, so they stay low weight.
Layer 3
Velocity across several dimensions
Repeated behavior is evaluated by keyed IP, billing email, WooCommerce session, and combined identity—not by one address alone.
Limit: Free uses conservative fixed thresholds; Premium adds distributed-rotation detection.
Layer 4
Challenge when risk calls for it
The account-free local check works immediately. Merchants may instead configure Cloudflare Turnstile or Google reCAPTCHA v2; only the selected provider loads on a challenged checkout.
Limit: Every challenge has limits and can add friction; ordinary low-risk checkout sees none.
Layer 5
Failed-payment feedback
Recorded gateway declines raise local suspicion and can create a temporary lockout. Form errors and broad gateway outages are treated differently.
Limit: This signal follows a gateway attempt, but helps shorten an active attack.
Layer 6
Explain, intervene, and recover
Decisions carry stable reason codes. Free provides Observe Mode, temporary blocks, trusted exemptions, and manual Emergency Mode; Premium can escalate and recover automatically.
Limit: Checkout Firewall never automatically disables the entire payment gateway.
Free core
Useful during a real attack—not a demo.
No account, timer, or local usage cap.
- Observe Mode by default before checkout enforcement
- Classic Checkout, Checkout Blocks, and protected Store API routes
- Signed checkout-flow proof, randomized honeypot, and timing evidence
- Account-free local challenge; optional Turnstile or reCAPTCHA v2
- Fixed IP, email, session, and IP + email velocity controls
- Failed-payment feedback without reading payment details
- Trusted exact-IP, narrow-CIDR, and authenticated-user exemptions
- Manual Emergency Mode, local activity, blocks, health, and alerts
- No Codeprint account and no local usage cap
Pro 1.0
Better distributed detection and automatic response.
Pro improves outcomes when attackers rotate identities or a team needs longer incident visibility.
- Automatic Normal, Elevated, Attack, and Recovery states
- Adaptive thresholds and recoverable challenge escalation
- Distributed identity-rotation detection
- Gateway-aware outage and flash-sale safeguards
- 90-day incident analytics, timelines, and CSV export
- Slack, Discord, and generic webhook alerts
- Policy import/export and privacy-bounded diagnostics
- Same Premium features on every paid plan
Version 1.0.0 · Available on WordPress.org
Put a control between checkout abuse and your payment gateway.
Install the complete Free edition from the official WordPress.org Plugin Directory. New installations begin safely in Observe Mode.