StoreGuard provides enterprise-grade IP rate limiting for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.
Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, StoreGuard has comprehensive protection for all critical WooCommerce functions.
<ul>
<li>
The Card-Testing Nightmare: Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the “Ultimate Anti-Chargeback & Fraud Shield.”
</li>
<li>
The Inventory / Server Crash Angle: Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.
</li>
<li>
The Peace of Mind : Stop payment fraud before it hits your gateway. Save thousands in chargeback fees for just $29/year.
</li>
</ul>
<h2>7 Independent Rate Limiters</h2>
1. Registration Protection — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.
2. Checkout Protection — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.
3. Login Protection — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.
4. Password Reset Protection — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.
5. Comment & Review Protection — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.
6. Payment Method Protection — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.
7. IP Management — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.
<img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" />
<h2>Professional Features</h2>
Security Monitoring — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.
Flexible Configuration — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.
Activity Logging — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.
Email Alerts — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.
<h3>Why Choose StoreGuard?</h3>
Purpose-Built for WooCommerce — Designed specifically for WooCommerce security with native integration in WooCommerce settings.
Safe by Default — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.
No Impact on Legitimate Customers — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.
Enterprise-Grade Protection Made Simple — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<blockquote>
<h1 style="text-align: center">Protect Your Site With reCaptcha</h1>
</blockquote>
With the WooCommerce reCaptcha extension, you can add Google reCaptcha to WordPress and WooCommerce login, registration, password pages, checkout, comments, and more. You can also add reCaptcha on any page using the shortcode. The extension supports v2 and v3 versions of Google Invisible captcha.
With increased spam and hacking attempts, the extension can act as an extra security gate to block bot traffic from making login attempts, checkouts, card checking, password resets, spam comments, and more. 
By using the invisible reCaptcha v3 version, you ensure that the captcha only appears to suspicious visitors and remains hidden from your valuable and real customers. You can also customize the spam score of V3 reCaptcha as per your website’s needs.
<div class="woo-sc-box normal" style="text-align: center;background-color: #ffc4bd">Attention! 
To prevent your WooCommerce stores from the ongoing surge in carding attacks and fraudulent transactions, it is highly advised to use <a href="https://woocommerce.com/products/anti-fraud-shield-for-woocommerce/">Anti-Fraud Shield</a> in Combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<img class="alignnone size-full wp-image-18734004579813" src="https://woocommerce.com/wp-content/uploads/2021/03/bnr.jpg" alt="google recaptcha for woocommerce" width="901" height="105" />
<h2>Now with Checkout Rate Lmiter – Ultimate Solution for Carding Attacks (New)</h2>
Limit manual carding testing attacks in your WooCommerce store using checkout rate-limiting technology. While reCaptcha stops bot-based carding attempts by recognizing the repeating patterns, the rate limiter will now complement reCaptcha by restricting users from making multiple checkout attempts within a specified period. This makes Google reCaptcha for WooCommerce the ultimate solution for all sorts of carding attempts. With the checkout rate limiter’s enhanced settings, you can:
<ul>
<li>Add rate limiter limits</li>
<li>Add time for which the place order button will be disabled when all attempts are exhausted</li>
<li>Add an error message to show when the rate limiter is triggered</li>
<li>Add IPs for which rate limiter will be disabled</li>
<li>Add IPs for which the place order button will be disabled</li>
<li>Add emails for which the place order button will be disbaled</li>
<li>Add user roles for which rate limiter will be disabled</li>
</ul>
<img class="alignnone size-full wp-image-18734004977215" src="https://woocommerce.com/wp-content/uploads/2021/03/recaptcha-for-woocommerce-129865.png" alt="recaptcha for woocommerce" width="980" height="575" />
<h2>Features of WooCommerce reCaptcha:</h2>
<ul>
<li style="list-style-type: none">
<ul>
<li style="font-weight: 400">Supports v2 and v3 versions</li>
<li style="font-weight: 400">Activate reCaptcha individually on certain pages</li>
<li style="font-weight: 400">Customize reCaptcha sizes</li>
<li style="font-weight: 400">Choose between dark and light reCaptcha themes</li>
<li style="font-weight: 400">Disable reCaptcha for specific countries</li>
<li style="font-weight: 400">Excludes a specific IP range</li>
<li style="font-weight: 400">Add reCaptcha anywhere using shortcode</li>
<li style="font-weight: 400">Customize spam score for V3 recaptcha</li>
<li style="font-weight: 400">Activate reCaptcha on the following WooCommerce pages: 
<ul>
<li style="font-weight: 400">WooCommerce Registration</li>
<li style="font-weight: 400">WooCommerce Login 
</li>
<li style="font-weight: 400">WooCommerce Lost Password </li>
<li style="font-weight: 400">WooCommerce Checkout 
</li>
<li style="font-weight: 400">Payment Method </li>
<li>Pay for the Order </li>
<li>Product Review </li>
</ul>
</li>
</ul>
</li>
<li>Enable reCaptcha on the following WordPress pages: 
<ul>
<li style="list-style-type: none">
<ul>
<li>WordPress Registration </li>
<li>Lost WordPress Password </li>
<li>WordPress Comments</li>
</ul>
</li>
</ul>
</li>
<li>Multilingual translation ready</li>
<li>Expands captcha options with support for reCaptcha.net</li>
</ul>
<img class="alignnone size-full wp-image-18734004460826" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-5.png" alt="google recaptcha for woocommerce" width="980" height="414" />
<h2>Supports V2 and V3 reCaptcha</h2>
With Google reCaptcha for WooCommerce, you can add V2 and V3 reCaptcha to your store – providing a strong solution for authenticating and validating customers who visit your online store. 
V2 recaptcha remains visible for everyone, whereas the V3 recaptcha appears only when suspicious traffic is detected and remains hidden for your real customers.
<img class="alignnone size-full wp-image-18734004446735" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-2.png" alt="" width="980" height="647" />
<h2>Customize reCaptcha for each WooCommerce and WordPress Page 
</h2>
<ul>
<li>The extension allows you to enable reCaptcha on specific WooCommerce and WordPress pages. You can also customize the following reCaptcha options for each page:
<ul>
<li style="font-weight: 400">Field Title</li>
<li style="font-weight: 400">Themes (light or dark)</li>
<li style="font-weight: 400">Size (normal or compact</li>
</ul>
</li>
</ul>
<img class="alignnone size-full wp-image-18734004446739" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-3.png" alt="" width="980" height="701" />
<h2>Add reCaptcha using Shortcode</h2>
Integrating Google reCaptcha into your website is made even more versatile with the inclusion of a shortcode feature. By enabling the Shortcode reCaptcha option, you can make any page of your website secure by reCaptcha by adding a shortcode [captcha_shortcode] on any desired page.
<img class="alignnone size-full wp-image-18734004446742" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-4.png" alt="" width="980" height="772" />
<h2>Supports reCaptcha.net</h2>
This WooCommerce reCaptcha extension provides advanced security measures and customization options for online stores. You can choose between Google.com and reCaptcha.net as the preferred reCAPTCHA type. The reCaptcha.net is preferable for countries where Google is blocked. The “No-Conflict Mode” ensures seamless integration by removing other CAPTCHA occurrences on that page to avoid site-breaking conflicts. 
<h2>General Settings</h2>
With additional customization options such as Recaptcha Field Title and a choice between Light and Dark themes, as well as Normal or Compact size, website administrators can seamlessly align reCaptcha with their site’s aesthetics and user experience preferences. 
The plugin allows the exclusion of specific countries and the option to disable reCAPTCHA for designated IP ranges, offering a tailored and robust security solution for WooCommerce websites.
<img class="alignnone size-full wp-image-18734004446744" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-6.png" alt="" width="980" height="908" />
<h2>Why Google reCaptcha for WooCommerce?</h2>
<img class="aligncenter wp-image-18734003260578 size-full" src="https://woocommerce.com/wp-content/uploads/2021/03/Google-recaptcha-blog-2x-2.png" alt="google recaptcha for woocommerce" width="980" height="3611" />
<h4>Requirements</h4>
Minimum PHP version: 5.6

Google reCaptcha

Protect your website from spam and bot attacks by adding reCaptcha to your WordPress & WooCommerce checkout, login, registration, reset password and other pages.

StoreGuard – IP Rate Limiter vs Google reCaptcha