Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs CheckoutGuard

CheckoutGuard is a WooCommerce plugin that helps store owners recover lost sales by tracking incomplete checkouts and providing tools for follow-up. It also includes fraud prevention, courier analytics, and an automatic success-ratio blocker to protect your store from high-risk orders. Checkout records and customer data are stored locally in your WordPress database. Limited site, administrator, environment, license, and plugin-usage telemetry is sent to CheckoutGuard Headquarters for licensing, usage limits, settings synchronization, and plugin analytics. Appsero diagnostic tracking is separate and is sent only after an administrator opts in. Customer checkout records are not sent to our licensing service; courier phone-number lookups are sent to the selected courier provider only when Courier Analytics is used. Incomplete Checkout Tracking CheckoutGuard captures customer information and cart contents in real-time as shoppers fill in the checkout form, even if they never click “Place Order”. Data is collected via debounced AJAX calls (800ms delay) to avoid excessive requests. Tracked fields include: Billing name, email, phone, and full address Order comments Cart items (product name, quantity, line total) and cart total Customer IP address and WooCommerce session ID Once captured, each incomplete checkout appears in the Incomplete Checkouts list where you can: View full details in a modal popup (customer info, cart items, timestamps) Recover the checkout by creating a real WooCommerce order with one click Mark as Hold for future follow-up, with an optional follow-up date (YYYY-MM-DD) Mark as Cancelled if the checkout is no longer relevant Re-open a cancelled checkout back to incomplete status Edit follow-up dates on held checkouts Completed orders are automatically cleaned up: when a customer finishes checkout, their incomplete record is deleted. Dashboard Overview The main dashboard gives you a bird’s-eye view of your checkout performance with: Pie chart showing the distribution of incomplete, recovered, hold, and cancelled checkouts Count cards for each status with clickable links to the detail pages Value cards showing the total monetary value for incomplete, recovered, hold, and cancelled checkouts Date range filters: Today, Last 7 Days, Last 30 Days, or a custom date range picker WordPress Dashboard Widget – a compact summary widget on the main WP dashboard showing the same stats and chart Fraud Blocker Prevent unwanted orders by maintaining blocklists for: IP Addresses – block by customer IP Email Addresses – block by billing email Phone Numbers – block by billing phone When a blocked customer attempts to checkout, WooCommerce displays an error message and the order is not processed. Each blocklist supports: Adding items with an optional reason Searching/filtering the list Deleting items Custom block message (configurable in Settings) You can also block or unblock directly from a WooCommerce order page using the “Fraud Blocker Actions” meta box in the order sidebar, which shows the customer’s IP, email, and phone with one-click Block/Unblock buttons. Success Ratio Blocker (Automatic) This feature automatically blocks checkout attempts from customers with a poor delivery success history. It works by: Checking the customer’s phone number against courier delivery data during checkout If their success ratio falls at or below the configured threshold, the order is blocked The blocked attempt is logged with full details (cart, ratio, threshold, IP) Configurable settings: Block Threshold (%) – orders are blocked if the success ratio is at or below this value (default: 20%) Grace Period – new customers are not blocked until they have more than this many total orders (default: 5) Custom Blocked Order Notice – the message shown to the customer, supports {ratio} placeholder All blocked attempts are logged in the Blocked Orders Log page where you can view details and delete log entries. Courier Analytics Check the delivery success and return ratio for any customer phone number across different courier services (Pathao, RedX, Steadfast, Paperfly, Carrybee). This feature provides: Standalone Courier Analytics page – enter a phone number and get a full breakdown WooCommerce Order List column – “Success Ratio” column added to the orders table showing a compact ratio badge per order Order Detail meta box – “Customer Success Ratio” sidebar box on individual order pages with a “Check Full Ratio” button Live ratio check on checkout – real-time feedback shown below the phone field as the customer types (triggers after 10+ digits) Doughnut chart visualization for the overall success rate Per-courier breakdown by courier service Ratio data is cached on each order via post meta to avoid redundant API calls. Invoicing, Packing Slips & Shipping Labels CheckoutGuard generates professional PDF invoices and printable courier shipping labels directly from your WooCommerce orders: Automatic PDF invoices – generated when an order reaches Processing or Completed, with sequential invoice numbering, your company name/logo header, and the invoice attached to the customer’s order emails Invoices admin page – a searchable, paginated list of every invoiced order with quick access to view, print, or download each invoice Packing slips – the same invoice layout with all pricing and totals omitted, for including in the shipping package Interactive Print page – preview and print an A4 invoice or a courier shipping label (A4, 2×3 in, or 3×3 in) with barcode, QR code, a Cash-on-Delivery box, and a courier badge, sized to match the physical paper exactly Blank manual invoices (Pro) – create a fully custom invoice and shipping label with no WooCommerce order behind it, using freeform line items or products picked from your catalog; these never touch stock, the Orders list, or sales reports Pro invoice options – custom invoice numbering prefix and reset period (never/yearly/monthly), Bangladesh VAT/TIN/BIN tax fields, editable footer text, bulk ZIP download of invoices, and courier shipping labels Customers can always download a plain PDF copy of their invoice from the My Account page Order Status Manager Create and manage custom WooCommerce order statuses from a dedicated admin page. This feature allows you to: View status overview cards showing live order counts for every status (default and custom) Create custom statuses with a label, color, description, and icon from a visual picker with 30+ order-management icons Edit any status including default WooCommerce statuses (Pending, Processing, On Hold, etc.) — change labels, colors, and icons Delete any status with automatic order migration — if orders exist on a status being deleted, you are prompted to choose a target status Reset to defaults from Settings to restore the original 7 WooCommerce statuses if any were accidentally deleted Custom statuses automatically appear in the WooCommerce order status dropdown Toggle the feature on/off from Settings > Module Toggles Checkout Status Management Each incomplete checkout flows through a clear lifecycle: Incomplete – captured but not completed Recovered – converted into a WooCommerce order Hold – flagged for follow-up with an optional date Cancelled – dismissed by admin Each status has its own dedicated list page with date range filters (Today, 7 Days, 30 Days, All Time, or Custom Range). WooCommerce Integration CheckoutGuard integrates deeply with WooCommerce: Order list column – adds “Success Ratio” column to both classic and HPOS order lists Order sidebar meta boxes – “Customer Success Ratio” and “Fraud Blocker Actions” boxes on every order HPOS compatible – works with both classic post-based orders and High-Performance Order Storage Checkout hooks – integrates at woocommerce_checkout_process for fraud blocking and woocommerce_thankyou for cleanup Admin Pages CheckoutGuard adds the following pages under its own top-level menu: Dashboard – overview with chart and stats Follow Up – checkouts marked as hold, ordered by follow-up date Incomplete – all incomplete checkouts Recovered – checkouts that were converted to orders Blocked Orders – log of automatically blocked checkout attempts Cancelled – dismissed checkouts Fraud Blocker – manage IP, email, and phone blocklists Courier Analytics – check delivery success ratios Invoices – searchable list of invoiced orders, with print/download access and (Pro) blank manual invoices Order Statuses – manage all WooCommerce order statuses with overview cards Settings – configuration and account management Third-Party Services This plugin connects to the following external services: CheckoutGuard Headquarters (li.czbd.app / Coder Zone BD) Used for license validation, usage tracking, settings synchronization, and plugin analytics. The plugin sends the site domain, a stable domain hash, administrator email, site name, WordPress/WooCommerce/PHP/MySQL versions, active theme, plugin version, selected plugin settings, feature-usage summaries, license status, and timestamps. Service URL: https://li.czbd.app Privacy Policy: https://coderzonebd.com/privacy-policy Terms of Service: https://coderzonebd.com/terms Appsero Appsero provides optional diagnostic and usage insights. It may receive the site name and URL, administrator name and email, server environment details, WordPress version, site language, user count, active and inactive plugin information, and plugin version. Appsero tracking is disabled by default and is sent only when an administrator selects Allow in the Appsero insights notice. It can be declined from that notice. Service URL: https://appsero.com Privacy Policy: https://appsero.com/privacy-policy/ Courier APIs (Pathao, RedX, Steadfast, Paperfly, Carrybee) When the Courier Analytics feature is enabled, customer phone numbers are sent to third-party courier service APIs to retrieve delivery success statistics. This only occurs when explicitly triggered by an admin or during checkout (if the live ratio check is enabled). Privacy Policy CheckoutGuard stores personal data locally in your WordPress database. The following data is collected: Customer Details: First name, last name, email, phone, billing address (address 1, address 2, city, state, postcode, country) Technical Information: Customer IP address, WooCommerce session ID Cart Information: Product ID, name, quantity, line total for each item, and total cart value Tracking Status: Checkout status (incomplete/recovered/hold/cancelled), follow-up dates, admin notes, recovered order ID Blocked Items: IP addresses, email addresses, and phone numbers on the blocklists, with reason and the admin who added them Blocked Order Logs: Phone number, email, cart details, cart value, success ratio, threshold at time of block, IP address, customer name, and timestamp This data is used exclusively within your WordPress admin area for checkout recovery and fraud prevention purposes. Data is not transmitted to external servers except in the following cases: * Limited site, administrator, environment, license, and plugin-usage telemetry is sent to the CheckoutGuard Headquarters API (li.czbd.app) * Optional diagnostic and usage data is sent to Appsero after administrator opt-in * Courier delivery ratio checks when the Courier Analytics feature is enabled (phone numbers are sent to courier APIs) GDPR Compliance: CheckoutGuard supports the WordPress personal data export and erasure tools (Tools > Export Personal Data / Erase Personal Data). When a valid request is made, all incomplete checkout records and blocklist entries associated with the requested email address will be included in exports or deleted upon erasure. Data retention is configurable in Settings (30 days, 90 days, 1 year, or indefinite). If the “Delete all data on uninstall” option is enabled, all plugin tables and options are permanently removed when the plugin is deleted. A suggested privacy policy text is automatically added to your site’s Privacy Policy page (Settings > Privacy) when the plugin is active.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!