StoreGuard provides enterprise-grade IP rate limiting for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.
Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, StoreGuard has comprehensive protection for all critical WooCommerce functions.
<ul>
<li>
The Card-Testing Nightmare: Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the “Ultimate Anti-Chargeback & Fraud Shield.”
</li>
<li>
The Inventory / Server Crash Angle: Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.
</li>
<li>
The Peace of Mind : Stop payment fraud before it hits your gateway. Save thousands in chargeback fees for just $29/year.
</li>
</ul>
<h2>7 Independent Rate Limiters</h2>
1. Registration Protection — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.
2. Checkout Protection — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.
3. Login Protection — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.
4. Password Reset Protection — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.
5. Comment & Review Protection — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.
6. Payment Method Protection — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.
7. IP Management — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.
<img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" />
<h2>Professional Features</h2>
Security Monitoring — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.
Flexible Configuration — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.
Activity Logging — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.
Email Alerts — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.
<h3>Why Choose StoreGuard?</h3>
Purpose-Built for WooCommerce — Designed specifically for WooCommerce security with native integration in WooCommerce settings.
Safe by Default — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.
No Impact on Legitimate Customers — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.
Enterprise-Grade Protection Made Simple — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<h2>Protect your Website with Google reCAPTCHA</h2>
Stop spam, fake registrations, and bot-driven attacks before they reach your website. With our WooCommerce reCAPTCHA plugin, you can easily add Google reCAPTCHA to key areas of your store, including login, registration, password reset, checkout, and comments. You also have the flexibility to place reCAPTCHA anywhere on your site using a simple shortcode.
The plugin supports both Google reCAPTCHA v2 and v3 (Invisible), giving you full control over how you want to protect your site. With Invisible reCAPTCHA v3, the challenge only appears when activity seems suspicious, keeping your genuine customers free from interruptions while blocking malicious traffic.
In a time when spam and hacking attempts are on the rise, this plugin adds a strong layer of protection. It prevents bots from fake logins, fraudulent checkouts, card testing, password resets, and comment spam, helping you secure your revenue and maintain customer trust.
<h3>Features of the WooCommerce reCAPTCHA Plugin</h3>
<ul>
<li style="font-weight: 400">Supports Google reCAPTCHA v2 (visible) and v3 (invisible)</li>
<li style="font-weight: 400">Exclude specific countries, IP addresses, and user roles</li>
<li style="font-weight: 400">Enable reCAPTCHA on WordPress pages: 
<ul>
<li style="font-weight: 400">Login Page</li>
<li style="font-weight: 400">Registration Page</li>
<li style="font-weight: 400">Lost Password Page</li>
<li style="font-weight: 400">Comments Section</li>
</ul>
</li>
<li style="font-weight: 400">Enable reCAPTCHA on WooCommerce pages 
<ul>
<li style="font-weight: 400">Login Page</li>
<li style="font-weight: 400">Registration Page</li>
<li style="font-weight: 400">Lost Password Page</li>
<li style="font-weight: 400">Checkout (Guest and Logged-In checkout pages)</li>
<li style="font-weight: 400">Pay for Order Page</li>
<li style="font-weight: 400">Product Reviews</li>
</ul>
</li>
<li style="font-weight: 400">Customize per page: Field Title, Theme (Light/Dark), Size (Normal/Compact)</li>
<li style="font-weight: 400">Add reCAPTCHA anywhere using shortcode</li>
<li style="font-weight: 400">Configure WordPress and WooCommerce pages separately</li>
<li style="font-weight: 400">Provides seamless protection without disrupting genuine users</li>
</ul>
<h3>Supports Google reCAPTCHA V2 and V3</h3>
<h4>With Google reCAPTCHA for WooCommerce, you can secure your store using both V2 and V3 protection. The V2 reCAPTCHA displays a visible challenge for all users, while the V3 version runs invisibly in the background and only appears when suspicious activity is detected, ensuring genuine customers enjoy a smooth shopping experience. 
V2 Google reCaptcha Example:</h4>
<img class="aligncenter wp-image-18734005635195 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/Screenshot-from-2025-08-18-12-03-39.png" alt="" width="1134" height="545" />
<h4>V3 Google reCaptcha Example:</h4>
<img class="aligncenter wp-image-18734005635213 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/Screenshot-from-2025-08-18-12-08-57.png" alt="" width="1317" height="457" />
<h3>Add reCAPTCHA to WordPress Pages</h3>
Enable reCAPTCHA on key WordPress pages, including login, registration, lost password, and comment forms. Customize the display options to match your site’s needs and safeguard against spam, bots, and fake signups.
<img class="aligncenter wp-image-18734005635250 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image_d94600.png" alt="" width="1636" height="855" />
<h3>Enable reCAPTCHA on WooCommerce Pages</h3>
Protect essential WooCommerce pages such as login, registration, lost password, guest checkout, logged-in checkout, pay for order, and product reviews. Each page can be customized separately, ensuring strong security without disrupting the customer experience.
<img class="aligncenter wp-image-18734005635253 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-1.png" alt="" width="1705" height="973" />
<h3>Customize reCAPTCHA for WordPress and WooCommerce Pages</h3>
Gain full control over how and where reCAPTCHA appears on your website. Adjust settings for each page individually, including:
<ul>
<li style="font-weight: 400">Enable or disable reCAPTCHA</li>
<li style="font-weight: 400">Set a custom field title</li>
<li style="font-weight: 400">Choose between light and dark themes</li>
<li style="font-weight: 400">Select size: normal or compact</li>
</ul>
<img class="aligncenter wp-image-18734005635255 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-2.png" alt="" width="1675" height="393" />
<h3>Add reCAPTCHA Using Shortcode</h3>
Secure any form page on your website by placing the shortcode [fme_recaptcha]. This gives you the flexibility to add Google reCAPTCHA beyond default WordPress and WooCommerce pages, ensuring site-wide protection wherever it’s needed.
<img class="aligncenter wp-image-18734005635256 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-3.png" alt="" width="765" height="444" />

Google reCaptcha Integration

Secure your website against spam and bot attacks by integrating reCAPTCHA into your WordPress and WooCommerce checkout, login, registration, and other key pages.

StoreGuard – IP Rate Limiter vs Google reCaptcha Integration