Shield · Quickstart

Install FindIP Shield in under two minutes

Paste one script tag, and every visit gets a session, risk signals, and auto-detected form events.

Script tag install

Paste before the closing </body> tag. Replace pub_xxxxxxxxx with your public site key from the dashboard.

<script
  src="https://cdn.findip.net/shield/v1.js"
  data-site-key="pub_xxxxxxxxx"
  data-auto-track="true"
  data-privacy-mode="balanced">
</script>

The v1.js URL always serves the latest non-breaking 1.x build. Prefer pinning an exact version with subresource integrity? Use the pinned snippet — your site's Install page shows it with a current hash:

<script
  src="https://cdn.findip.net/shield/1.0.1/findip-shield.min.js"
  integrity="sha384-4h6bh1btv0FKVS4QdmCwBQLPJKWjzZnaEiC4KyugJBf8RLfhTNT0fvHvvSelG8Og"
  crossorigin="anonymous"
  data-site-key="pub_xxxxxxxxx"
  data-auto-track="true"
  data-privacy-mode="balanced">
</script>

Pinned URLs are immutable; upgrading means changing the version and hash.

What happens automatically

1. Auto-initThe SDK initializes itself from the data-* attributes.

2. SessionA first-party session cookie (_fip_sid) is created.

3. First eventA page_view event is sent to FindIP.

4. FormsForm submissions are detected and classified (signup, login, checkout, …).

5. GTMRisk results are pushed to dataLayer if Google Tag Manager is present.

Manual events & verification

FindIP.track('signup_attempt', {
  email_domain: 'gmail.com',
  plan: 'free',
});

Verify the install: open browser DevTools → Network tab and filter for shield/track. You should see POST requests after page load — and the event on your site's dashboard moments later.

Options

All configuration via data-* attributes

Attribute	Default	Description
`data-site-key`	required	Your public site key
`data-privacy-mode`	`balanced`	`strict`, `balanced`, or `advanced`
`data-auto-track`	`true`	Auto page view tracking
`data-auto-detect-forms`	`true`	Auto form submit detection
`data-push-to-data-layer`	`true`	Push risk results to the GTM dataLayer
`data-debug`	`false`	Enable console debug logging

No events appearingCheck that your domain is allowlisted for the site key.

Origin rejectedEnsure your page's origin matches the site's configured allowed domains.

No visitor cookieExpected in strict privacy mode.