StoreGuard provides enterprise-grade IP rate limiting for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.
Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, StoreGuard has comprehensive protection for all critical WooCommerce functions.
<ul>
<li>
The Card-Testing Nightmare: Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the “Ultimate Anti-Chargeback & Fraud Shield.”
</li>
<li>
The Inventory / Server Crash Angle: Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.
</li>
<li>
The Peace of Mind : Stop payment fraud before it hits your gateway. Save thousands in chargeback fees for just $29/year.
</li>
</ul>
<h2>7 Independent Rate Limiters</h2>
1. Registration Protection — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.
2. Checkout Protection — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.
3. Login Protection — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.
4. Password Reset Protection — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.
5. Comment & Review Protection — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.
6. Payment Method Protection — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.
7. IP Management — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.
<img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" />
<h2>Professional Features</h2>
Security Monitoring — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.
Flexible Configuration — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.
Activity Logging — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.
Email Alerts — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.
<h3>Why Choose StoreGuard?</h3>
Purpose-Built for WooCommerce — Designed specifically for WooCommerce security with native integration in WooCommerce settings.
Safe by Default — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.
No Impact on Legitimate Customers — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.
Enterprise-Grade Protection Made Simple — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<div style="background: linear-gradient(135deg,#f8f9fa,#eef4ff);border-left: 5px solid #0b5ed7;padding: 16px 20px;margin: 16px 0;border-radius: 8px;font-size: 16px;font-weight: 600;color: #212529">Supports Google reCAPTCHA, Cloudflare Turnstile & hCaptcha 
 
Choose a privacy-friendly or traditional CAPTCHA for your WooCommerce store</div>
<ul class="wccom-tick-list-primary">
<li>Support both Classic reCaptcha and enterprise reCaptcha</li>
<li>Support turnstile checkbox mode and hidden mode</li>
<li>Support HCaptcha checkbox mode and hidden mode(enterprise version)</li>
<li>Support both Classic Checkout and Checkout Block</li>
<li>Support both reCaptcha V2 (checkbox) and reCaptcha V3</li>
<li>Support hybrid reCaptcha (V3 as main reCaptcha and use V2 when V3 get fail so that user not blocked)</li>
<li>Protection from spam</li>
<li>Protection from unauthorised login attempts</li>
<li>Stop fake registrations</li>
<li>Stop fake guest orders</li>
<li>Low-friction, effortless interaction for users</li>
<li>Easy for customers, Hard for bots</li>
<li>Enable it to required places only</li>
</ul>
<div style="border:1px solid #dcdcde;padding:16px;border-radius:6px;background:#f0f6fc;margin-top:20px;margin-bottom:20px">
 
 Add a Second Layer of Protection 
 

 reCAPTCHA stops bots at the form level. But what about repeated attacks and abusive traffic?
 

 StoreGuard – IP Rate Limiter blocks suspicious IPs before they can spam, brute-force, or overload your store.
 
<ul style="margin:0 0 12px 18px">
<li>Limit repeated login & checkout attempts</li>
<li>Automatically block abusive IPs</li>
<li>Reduce bot traffic and server load</li>
</ul>
<a href="https://woocommerce.com/products/storeguard-ip-rate-limiter/" target="_blank" style="padding:9px 16px;background:#2271b1;color:#fff;text-decoration:none;border-radius:4px;font-weight:500">View StoreGuard →</a>
</div>
<h2>Description</h2>
Security is the most important concern nowadays for any website or an eCommerce store. Because of automated tools and bots your site does not perform its best. There are lots of automated tools available to make your site spammy. Therefore any website or eCommerce site must have a captcha that protects from automated bots. Google Recaptcha “I am not a Robot” provides the best protection by involving human interaction to solve the captcha. The capacity to investigate and recognize gets to by bots from people, reCAPTCHA shields mechanized programming from hurting your site. Though, legitimate clients can in any case experience this shield.
reCaptcha for WooCommerce is the best solution that provides an all-in-one captcha for  WooCommerce as well as WordPress. There are easy settings given with on/off captcha on required places. The best thing about this plugin is highly built on WooCommerce as well as WordPress standard so that it can not break your site in any way.
Now featuring Cloudflare Turnstile: We understand the need for choice and better user experience. That’s why we now integrate Cloudflare Turnstile, a privacy-conscious CAPTCHA that often works without puzzles or checkboxes, making verification faster and less intrusive for your legitimate customers.
Now featuring hCaptcha: We believe in giving you full control over your store’s security. With hCaptcha support, you can select a privacy-focused verification method that effectively blocks spam and automated abuse while maintaining a smooth user experience.
<img class="alignnone wp-image-5322573 size-large" src="https://woocommerce.com/wp-content/uploads/2020/02/reCpatcha-for-WooCommerce.png?w=980" alt="" width="980" height="733" />
Cloudflare Turnstile
<h2><img class="alignleft size-medium wp-image-18734006209196" src="https://woocommerce.com/wp-content/uploads/2020/02/Cloudflare-Turnstile-for-WooCommerce.png?w=896" alt="Cloudflare-Turnstile-for-WooCommerce" width="896" height="543" /></h2>
<h2></h2>
HCaptcha 
<img class="alignleft size-medium wp-image-18734006316005" src="https://woocommerce.com/wp-content/uploads/2020/02/hCaptcha_For_WooCommerce.png?w=896" alt="hCaptcha_For_WooCommerce" width="896" height="652" />
<h2></h2>
<h2>Features</h2>
<ul class="wccom-tick-list-secondary">
<li>login reCaptcha</li>
<li>registration reCaptcha</li>
<li>Lost password reCaptcha</li>
<li>Guest checkout reCaptcha</li>
<li>Login user checkout reCaptcha</li>
<li>Add payment method reCaptcha</li>
<li>WooCommerce pay for order captcha</li>
<li>WooCommerce Product review captcha</li>
<li>WooCommerce Track Order captcha</li>
<li>WordPress Comment form captcha</li>
<li>WP-Login reCaptcha</li>
<li>WP-Register reCaptcha</li>
<li>WP-Lost password reCaptcha</li>
<li>JetPack Forms reCaptcha</li>
<li>Custom label for reCaptcha</li>
<li>Custom error messages</li>
<li>Recaptcha dark/light theme</li>
<li>Captcha full/compact mode</li>
<li>Captcha language selection for V2.</li>
<li>Auto-detect user language</li>
<li>Disable submit button until captcha checked</li>
<li>Reset captcha on order postback error</li>
<li>Disable reCaptcha for IP/Range</li>
</ul>
New Feature
ReCaptcha for WooCommerce now supports Checkout Block reCaptcha. Click here to check the full video on <a href="https://www.youtube.com/watch?v=AiEqw6nXYM8" target="_blank" rel="noopener">ReCaptcha For Chckout Block of WooCommerce</a>
<img class="alignleft wp-image-18734004457243 size-large" src="https://woocommerce.com/wp-content/uploads/2020/02/reCaptcha-for-Woocommerce-Checkout-block.png?w=573" alt="reCaptcha-for-Woocommerce-Checkout-block" width="573" height="860" />

reCaptcha Integration

Protect your eCommerce store from malicious and automated attacks by using reCaptcha/Cloudflare Turnstile/hCaptcha for WooCommerce.

StoreGuard – IP Rate Limiter vs reCaptcha Integration