Free
$0 forever
No local usage cap
The complete local protection engine for one store or many.
- All Free protection layers
- Observe and Standard modes
- 7-day event history
Pricing · Free and Premium
All paid plans include the same Premium 1.0 features. Plans are annual and include a 14-day refund period.
$0 forever
No local usage cap
The complete local protection engine for one store or many.
MOST POPULAR
$59 per year
1 production site
Automatic response and distributed-abuse detection.
$119 per year
5 production sites
The same Premium engine for a growing store portfolio.
$199 per year
25 production sites
The same Premium engine across client stores.
Freemius securely handles payment, tax, subscriptions, licensing, Premium downloads, and Premium updates. Choose a plan to continue to Freemius checkout.
Commercial terms
No monthly or lifetime plan at launch.
Recognized local, development, and staging installations do not consume production activations.
Baseline protection does not disappear if a paid license lapses.
Freemius handles checkout, tax, subscriptions, licenses, and premium delivery.
Pricing FAQ
Card testing is an attacker sending stolen card details through a real checkout to learn which cards still work. Not every failed order is card testing, so patterns matter.
No. Checkout Firewall is focused on automated checkout abuse. It is not KYC, AML, chargeback management, a web application firewall, or a guarantee against every fraudulent transaction.
Free includes the complete local protection engine, Observe Mode, fixed velocity controls, provider-neutral challenges, failed-payment lockout, trusted exemptions, Emergency Mode, activity, and recovery tools. It is not a timed or usage-capped trial.
No. Free protection works locally without a Codeprint account or per-order Codeprint API. Freemius connection is optional for Free and explicit.
No. The default challenge is local. You may optionally choose Turnstile or reCAPTCHA v2. Cloudflare CDN use is separate and also optional.
No. Checkout Firewall does not read, store, log, transmit, hash, inspect, or analyze card numbers, CVCs, or gateway payment payloads.
Yes. Version 1.0.0 covers normal Classic Checkout, Checkout Blocks, and protected Store API checkout routes. The legacy Classic order-pay retry endpoint is a documented version 1 limitation.
Any automated protection can be wrong. New installs begin in Observe Mode, uncertain traffic prefers a recoverable challenge, narrow trusted exemptions are available, and temporary blocks can be released.
The local provider is the default fallback for an unverified or temporarily unavailable remote provider. A merchant can also deliberately select throttle-only recovery. Failure paths remain visible and retryable.
The Free core remains active. Premium automation, alerts, new Premium analytics, premium updates, and priority support require an active license; settings and existing history are preserved.
Recognized local, development, and staging installations do not consume production activations.
No. Checkout Firewall never automatically shuts down, hides, reorders, or wraps the payment gateway.
The engine integrates at WooCommerce checkout boundaries rather than reading gateway payloads. We publish only evidence-backed compatibility states and do not claim a specific live gateway transaction unless tested.
Version 1.0.0 · Available on WordPress.org
Install the complete Free edition from the official WordPress.org Plugin Directory. New installations begin safely in Observe Mode.