StoreGuard provides enterprise-grade IP rate limiting for WooCommerce stores of any size. By restricting the number of actions any single IP address can perform within a specific time window, StoreGuard automatically blocks malicious activity while maintaining a smooth experience for legitimate customers.
Whether you’re fighting registration spam, brute-force login attacks, comment spam, review spam, card testing fraud, or checkout abuse, StoreGuard has comprehensive protection for all critical WooCommerce functions.
<ul>
<li>
The Card-Testing Nightmare: Card testing (bots trying thousands of stolen credit cards on a checkout page) can cause payment gateway bans, thousands of dollars in chargeback fees, and lost API access. Frame StoreGuard as the “Ultimate Anti-Chargeback & Fraud Shield.”
</li>
<li>
The Inventory / Server Crash Angle: Emphasize that brute-force bot signups and rapid checkouts slow down servers or lock up stock, causing real customers to abandon carts.
</li>
<li>
The Peace of Mind : Stop payment fraud before it hits your gateway. Save thousands in chargeback fees for just $29/year.
</li>
</ul>
<h2>7 Independent Rate Limiters</h2>
1. Registration Protection — Stop registration spam and automated bot accounts. Limit signups per IP with customizable time windows and block durations. Recommended: 3 attempts per 60 minutes, block for 24 hours.
2. Checkout Protection — Prevent payment fraud and checkout abuse. Covers classic forms, AJAX checkout, and WooCommerce Blocks. Recommended: 10 attempts per 60 minutes, block for 12 hours.
3. Login Protection — Block brute-force password attacks across all login methods (WordPress login, WooCommerce account login, REST API, custom endpoints). Recommended: 5 failed attempts per 30 minutes, block for 60 minutes.
4. Password Reset Protection — Prevent email enumeration attacks by limiting password reset requests per IP. Stop attackers from discovering valid email addresses in your system.
5. Comment & Review Protection — Stop spam submissions on posts, pages, and product reviews. Configure independently for different limits on comments vs. reviews.
6. Payment Method Protection — Reduce card testing attacks by limiting payment method additions per IP. Works with all WooCommerce payment gateways and REST API.
7. IP Management — Whitelist trusted IPs (office, developers, partners), manually block suspicious IPs, and view all currently blocked IPs in your dashboard.
<img class="alignleft size-medium wp-image-18734006514625" src="https://woocommerce.com/wp-content/uploads/2026/04/storeguard-frontend-blocked-900x675-1.png?w=896" alt="storeguard-frontend-blocked-900x675" width="896" height="672" />
<h2>Professional Features</h2>
Security Monitoring — Dashboard widget shows recent blocks, detailed logs show exactly what was blocked and why, email notifications alert you immediately to suspicious activity.
Flexible Configuration — 7 organized tabs in WooCommerce settings, recommended starting values provided for each limiter, fully customizable from dashboard, no coding required.
Activity Logging — Comprehensive logs for each rate limiter type, block event history with timestamps, security audit trails, filter by IP address and action.
Email Alerts — Real-time notifications when IPs are blocked, customizable email templates with placeholders, configure sender, subject, and body, enable/disable as needed.
<h3>Why Choose StoreGuard?</h3>
Purpose-Built for WooCommerce — Designed specifically for WooCommerce security with native integration in WooCommerce settings.
Safe by Default — All rate limiters are OFF by default. The plugin is completely passive until you deliberately enable only the protections you need.
No Impact on Legitimate Customers — Whitelisting available for trusted IPs, generous attempt limits prevent false positives (5-10 attempts before blocking), high time windows (30-60 minutes), long block durations prevent permanent lockouts, manual unblocking available in seconds.
Enterprise-Grade Protection Made Simple — Install in 2 minutes, configure in 5 minutes with provided recommendations, comprehensive documentation included, professional admin interface following WooCommerce standards.

StoreGuard – IP Rate Limiter

<div>Protect your WooCommerce store from bots, brute-force attacks, and payment fraud with intelligent IP-based rate limiting. StoreGuard limits registrations, checkouts, logins, and payments per IP address—all configured directly in WooCommerce settings with recommended values provided.</div>

<h2 style="color: #f5247d">Sell license keys for software</h2>
WooCommerce Software Add‑on gives you end‑to‑end licensing inside WooCommerce. Generate keys on purchase, manage activations and upgrades, and keep support simple by managing everything where you already fulfill orders.
<h2 style="color: #f5247d">Sell licenses and upgrades</h2>
Mark any product as software, set licensing rules, and let the add‑on handle the rest. Customers buy like any other product, and when the order is completed they automatically receive their license key, activation email, and activation limits in the order‑complete message.
<figure id="attachment_17590" aria-describedby="caption-attachment-17590" style="width: 558px" class="wp-caption aligncenter"><img class="wp-image-17590" title="screen-capture-2" src="https://woocommerce.com/wp-content/uploads/2012/05/screen-capture-21-620x371.png" alt="The software settings" width="558" height="334" /><figcaption id="caption-attachment-17590" class="wp-caption-text">The software settings</figcaption></figure>
<figure id="attachment_17588" aria-describedby="caption-attachment-17588" style="width: 261px" class="wp-caption alignright"><img class="wp-image-17588" title="screen-capture" src="https://woocommerce.com/wp-content/uploads/2012/05/screen-capture1.png" alt="If enabled, users can upgrade old keys for a reduced price" width="261" height="230" /><figcaption id="caption-attachment-17588" class="wp-caption-text">If enabled, users can upgrade old keys for a reduced price</figcaption></figure>
If you introduce a paid upgrade, define eligible past keys and an upgrade price. During checkout, customers enter their existing license and receive upgrade pricing automatically.
<h2 style="color: #f5247d">View purchased keys</h2>
See exactly which key belongs to which order, including remaining activations, right on the WooCommerce Edit Order screen. Need to resend the license email? Use the built‑in “Send” action without leaving WooCommerce.
<figure id="attachment_17591" aria-describedby="caption-attachment-17591" style="width: 558px" class="wp-caption aligncenter"><img class="wp-image-17591" title="screen-capture-5" src="https://woocommerce.com/wp-content/uploads/2012/05/screen-capture-51-620x183.png" alt="Licenses and activations on the orders page" width="558" height="165" /><figcaption id="caption-attachment-17591" class="wp-caption-text"> Licenses and activations on the orders page</figcaption></figure>
For a global view, go to WooCommerce → License Keys to search, filter, and bulk‑revoke keys when necessary.
<h2 style="color: #f5247d">Track activations and view reports</h2>
Understand usage at a glance. The WooCommerce → Reports → Software dashboard summarizes sales and activation activity so you can spot trends, enforce limits, and plan upgrades.
<figure id="attachment_17592" aria-describedby="caption-attachment-17592" style="width: 558px" class="wp-caption aligncenter"><img class="wp-image-17592" title="screen-capture-6" src="https://woocommerce.com/wp-content/uploads/2012/05/screen-capture-61-620x138.png" alt="Activations report" width="558" height="124" /><figcaption id="caption-attachment-17592" class="wp-caption-text"> Activations report</figcaption></figure>
<h2 style="color: #f5247d">Integrate with your app via API</h2>
Validate licenses from your desktop app, plugin, or SaaS. The API supports generating keys, activating, de‑activating, resetting, and checking validity so you can enforce licensing where it matters: inside your software. See the documentation for endpoints and examples.
Not sure if you need Software Add-on or <a href="https://woocommerce.com/products/woocommerce-api-manager/" target="_blank" rel="noopener">API Manager for WooCommerce</a>? In most cases, API Manager will be the better fit. If you’re unsure, <a href="https://kestrelwp.com/support" target="_blank" rel="noopener">contact Kestrel support</a> and we’ll help you choose the right extension for your store.
<hr style="clear: both" />
<h2 style="color: #f5247d">More information</h2>
<ul style="line-height: 1.8em">
<li style="list-style-type: none">
<ul style="line-height: 1.8em">
<li>Read the Software Add‑on documentation for setup, API details, and upgrade workflows.</li>
<li>Need help getting started? <a href="https://kestrelwp.com/support" target="_blank" rel="noopener">Contact our support team</a>.</li>
</ul>
Made by 
<a href="https://woocommerce.com/vendor/kestrel/" target="_blank" rel="noopener"> 
<img src="https://static.kestrelwp.com/kestrel-logo.png?s=2d33894abf5eaadac4296b4d898cd4e1ea8db7a7" alt="Kestrel logo" width="200" height="45" /> 
</a></li>
</ul>

Software Add-on

Sell and manage license keys directly in WooCommerce. Generate keys on purchase, handle activations and upgrades, and keep everything in one place your team already uses.

StoreGuard – IP Rate Limiter vs Software Add-on