Checkout Shield for WooCommerce – Stop Fake Orders, Spam Bots & Card Testing vs Shed Turnstile

Checkout Shield stops fake checkout orders and card testing attacks — the kind that bypass your CAPTCHA. Card testing bots don’t fill out your checkout form. They hit your store’s checkout API directly, completely skipping any reCAPTCHA or hCaptcha you’ve set up. That’s why CAPTCHA alone doesn’t stop them. This plugin verifies that every checkout request comes from a real browser session. Bots that can’t prove they loaded your checkout page get blocked before WooCommerce processes the order. Why Store Owners Choose This Plugin Catches what CAPTCHA misses — blocks bots hitting your checkout API directly Works with any caching — LiteSpeed, Cloudflare, WP Rocket, W3TC — no conflicts Zero configuration — activate and you’re protected No external services — everything runs on your server, no subscriptions No performance impact — validation adds microseconds, not seconds Features (Free) Automatic bot blocking — works the moment you activate, no setup needed 4 protection levels — Learning, Permissive, Balanced, and Strict — choose how aggressive you want to be Dashboard overview — see blocked vs verified orders at a glance with a 7-day chart Order status tracking — know which orders were flagged, passed, or blocked IP whitelist — let trusted addresses through, supports CIDR notation API key authentication — for headless and custom checkout setups Works with all checkout types — classic, block-based, and all payment gateways HPOS compatible — works with High-Performance Order Storage WooCommerce logging — full integration with WooCommerce Status logs Pro Features Take control with advanced tools: 3-level logging control — turn logging off, log blocked attempts only, or log everything Recent blocks feed — last 50 blocked attempts on your dashboard with email, payment method, and reason Automatic CDN/proxy detection — identifies real visitor IPs behind Cloudflare, Sucuri, or Akamai Stronger permissive mode — tighter bot detection with referrer verification Checkout details in logs — see which email and payment method bots tried to use Customer blocklist — block repeat offenders by email, name, address, phone, IP, or postal code One-click order blocking — block a customer directly from any order screen Learn more about Pro features

Shed Turnstile provides centralized management of Cloudflare Turnstile Site Key and Secret Key, offering a shared API for compatible plugins such as Shed Form. Features: Centralized Site Key / Secret Key management API functions callable from other plugins Turnstile widget rendering helper Server-side token verification API Functions shedturn_is_configured() — Check if keys are configured shedturn_render_widget( $args ) — Return widget HTML shedturn_verify_token( $token, $ip ) — Verify a Turnstile token shedturn_enqueue_script() — Enqueue Cloudflare JS 日本語の説明 Shed Turnstile は Cloudflare Turnstile の Site Key / Secret Key を一元管理し、Shed Form などの対応プラグインに共通の API を提供します。 主な機能: Site Key / Secret Key の一元管理 他プラグインから呼び出せる API 関数 Turnstile ウィジェットの描画ヘルパー トークンのサーバーサイド検証 Third-Party Services This plugin connects to Cloudflare’s servers for Turnstile verification. Service: Cloudflare Turnstile Privacy Policy: https://www.cloudflare.com/privacypolicy/ Terms of Service: https://www.cloudflare.com/website-terms/ Data sent: Turnstile token, site key, user IP address When: Each time a form with Turnstile enabled is submitted