StoreGuard provides enterprise-grade IP rate limiting for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.
Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, StoreGuard has comprehensive protection for all critical WooCommerce functions.
<ul>
<li>
The Card-Testing Nightmare: Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the “Ultimate Anti-Chargeback & Fraud Shield.”
</li>
<li>
The Inventory / Server Crash Angle: Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.
</li>
<li>
The Peace of Mind : Stop payment fraud before it hits your gateway. Save thousands in chargeback fees for just $29/year.
</li>
</ul>
<h2>7 Independent Rate Limiters</h2>
1. Registration Protection — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.
2. Checkout Protection — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.
3. Login Protection — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.
4. Password Reset Protection — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.
5. Comment & Review Protection — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.
6. Payment Method Protection — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.
7. IP Management — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.
<img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" />
<h2>Professional Features</h2>
Security Monitoring — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.
Flexible Configuration — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.
Activity Logging — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.
Email Alerts — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.
<h3>Why Choose StoreGuard?</h3>
Purpose-Built for WooCommerce — Designed specifically for WooCommerce security with native integration in WooCommerce settings.
Safe by Default — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.
No Impact on Legitimate Customers — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.
Enterprise-Grade Protection Made Simple — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<div class="woo-sc-box alert">
TCF v2.3 takes effect on 28 February 2026 — sites that don’t update may have consent rejected, causing ads to switch to limited mode and reduce revenue. This plugin supports the latest IAB TCF v2.3 consent requirements
</div>
WebToffee GDPR Cookie Consent for WooCommerce helps websites comply with privacy laws like GDPR, CCPA, and more by enabling cookie consent management through customizable banners, popups, and widgets.
It blocks non-essential cookies until consent is given, supports granular control by cookie category, integrates with Google Consent Mode v2, IAB TCF v2.3, and Microsoft Clarity Consent Mode, and offers features like Geo-targeting, multilingual support, advanced cookie scanning, consent logs, and a built-in cookie policy generator.
<img class="size-medium wp-image-18734005527500 aligncenter" src="https://woocommerce.com/wp-content/uploads/2025/07/Frame-6637-1.png?w=840" alt="Advanced Features of the GDPR Cookie Consent extension " width="840" height="388" />
<img class="wp-image-18734005526928 alignright" src="https://woocommerce.com/wp-content/uploads/2025/07/GDPR-EU-Cookie-Law-Compliance-1.png?w=800" alt="GDPR and EU cookie law compliance" width="451" height="463" />
GDPR and EU Cookie Law Compliance
Ensure your website meets GDPR and EU Cookie Law requirements with built-in tools for transparent consent management. The extension enables prior consent collection, automatic blocking of non-essential cookies, and clear categorization of cookie types. It also provides users with granular control over their consent preferences and the ability to revoke consent at any time.
Supported EU cookie laws:
<ul>
<li>GDPR (EU and UK)</li>
<li>LGPD (Brazil)</li>
<li>PIPEDA (Canada)</li>
<li>Privacy Act (Australia)</li>
<li>POPIA (South Africa)</li>
<li>nFADP (Switzerland)</li>
<li>PDPL (Argentina)</li>
<li>PDPL (Andorra)</li>
</ul>
<img class="wp-image-18734005526958 alignleft" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/CPRA-and-US-Cookie-Consent-1.png?w=800" alt="CCPA/CPRA and US cookie consent" width="451" height="463" />
 
CCPA/CPRA and US Cookie Consent
Comply with CCPA, CPRA, and other U.S. privacy regulations by enabling clear opt-out mechanisms and transparent cookie usage disclosures. The extension supports “Do Not Sell or Share My Personal Information” links, honors Global Privacy Control (GPC) signals, and allows users to decline non-essential cookies.
Supported US State Laws: CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah)
<img class="alignright wp-image-18734005527316" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-2.png?w=800" alt="Deploy a Customizable Cookie Consent Banner " width="451" height="463" />
 
 
 
 
Deploy A Customizable Cookie Consent Banner
Design and display a fully customizable, ADA-compliant, and responsive cookie consent banner that aligns with your brand and complies with privacy laws.
Choose from various layouts like popups, bars, or boxes, and customize colors, text, and buttons to match your site’s look and feel. This extension allows you to add Accept, Reject, and Settings buttons to give users clear and accessible choices for managing their cookie preferences.
 
 
 
<img class="alignleft wp-image-18734005527329" src="https://woocommerce.com/wp-content/uploads/2025/07/Advanced-Cookie-Scanner-with-Automatic-Cookie-Blocker-1.png?w=800" alt="Advanced Cookie Scanner with Automatic Cookie Blocker " width="451" height="463" />
 
Advanced Cookie Scanner With Automatic Cookie Blocker
Effortlessly manage cookies on your website with the built-in advanced cookie scanner and automatic cookie blocker. The extension scans your website to detect all cookies in use and automatically categorizes them into groups like Necessary, Analytics, Advertising, and more. 
Once scanned, it enables you to block non-essential cookies by default until user consent is obtained, ensuring full compliance with GDPR and similar regulations.
<img class="alignright wp-image-18734005527336" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-3.png?w=800" alt="Certified Google CMP Partner with Google Consent Mode, Microsoft Clarity Consent Mode & UET Support " width="451" height="463" />
 
 
 
Certified Google CMP Partner with  Google Consent Mode, Microsoft Clarity Consent Mode, and UET Support
As a Google-certified Consent Management Platform (CMP), the extension offers seamless integration with Google’s ads and analytical services. It ensures your website stays compliant with the latest standards for data privacy and digital advertising.
Supported Integration:
<ul>
<li style="font-weight: 400">Google Consent Mode</li>
<li style="font-weight: 400">UET Consent Mode</li>
<li style="font-weight: 400">Microsoft Clarity Consent Mode</li>
<li style="font-weight: 400">IAB TCF v2.3</li>
</ul>
<img class="alignleft wp-image-18734005527358" src="https://woocommerce.com/wp-content/uploads/2025/07/Geo-Targeted-Cookie-Banner-1.png?w=800" alt="Geo-Targeted Cookie Banner " width="451" height="463" />
 
 
 
Geo-Targeted Cookie Banner
Display cookie consent banners only where legally required using the extension’s built-in geo-targeting feature.
This allows you to show or hide banners based on a visitor’s location, ensuring compliance with region-specific privacy laws like GDPR (EU), CCPA/CPRA (California), and more, without disrupting the user experience for others.
By targeting users based on their IP addresses, you can minimize banner fatigue for global audiences while maintaining full compliance in applicable regions.
<img class="alignright wp-image-18734005527375" src="https://woocommerce.com/wp-content/uploads/2025/07/Native-WordPress-Cookie-Consent-Solution-1.png?w=800" alt="Native WordPress Cookie Consent Solution" width="438" height="450" />
 
 
 
Native WordPress Cookie Consent Solution
This cookie consent solution integrates seamlessly with your site and supports the WP Consent API for smooth, reliable consent handling.
All consent data is securely stored in your own database—never on external servers—ensuring full control, privacy, and compliance with data storage regulations.
<img class="alignleft wp-image-18734005527391" src="https://woocommerce.com/wp-content/uploads/2025/07/Built-In-Free-Cookie-Policy-Generator-1.png?w=800" alt="Built-In Free Cookie Policy Generator " width="451" height="463" />
 
 
 
 
 
 
Built-In Free Cookie Policy Generator
Easily generate a compliant cookie policy for your website with this extension’s built-in cookie policy generator. It automatically pulls details from your scanned cookies, categorizes them, and creates a clear, user-friendly cookie policy page.
<img class="alignright wp-image-18734005527402" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-2.png?w=800" alt="Keep a Consent Log " width="451" height="508" />
 
 
 
 
 
 
 
Keep A Consent Log
Maintain a complete, anonymized record of user consent to support compliance and auditing needs. The extension logs each visitor’s cookie preferences along with the date, time, and masked IP address.
You can easily export these consent logs in CSV format for legal reference, reporting, or internal review, ensuring transparency and accountability in your consent management process.
<img class="alignleft wp-image-18734005527420" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-3.png?w=800" alt="Translation-Ready for WordPress Multilingual Websites" width="451" height="508" />
 
 
 
 
 
 
Translation-Ready for WordPress Multilingual Websites
Seamlessly deliver cookie consent experiences in multiple languages with built-in multilingual support.
The extension is fully compatible with popular translation tools like WPML, qTranslate, and Polylang, ensuring your banner aligns with the language settings of your website.
English is the default language, and the extension comes preloaded with several widely spoken European languages out of the box.

GDPR Cookie Consent

Deploy a cookie banner to comply with GDPR, CCPA, and other privacy laws.

StoreGuard – IP Rate Limiter vs GDPR Cookie Consent