FindIP Shield for WooCommerce
Privacy-conscious visitor risk signals for your WooCommerce storefront: VPN, proxy, Tor, relay, hosting, datacenter, malicious-IP, and network-service flags plus a risk score for every session — without collecting customer, cart, order, or payment data.
Installation
- Install and activate FindIP Shield for WooCommerce (WooCommerce is required; the standalone FindIP Shield WordPress plugin must be deactivated first — the two must not run together).
- Create a Shield site at findip.net → Shield → Sites → New site whose domain matches your storefront hostname.
- Open WooCommerce → FindIP Shield, paste the site's public key (
pub_…), and save. - Load a storefront page, then confirm the first event on your Shield site's Install page.
The plugin loads an exact, immutable Shield SDK build from cdn.findip.net with subresource integrity, so the browser refuses to run a script that does not match the recorded hash.
What it tracks
Standard SDK events (session_start, page_view, automatic form events) plus WooCommerce storefront signals, each individually toggleable:
| Signal | Event |
|---|---|
| Product page view | custom with event_type: product_view |
| Cart page view | custom with event_type: cart_view |
| Item added / removed (classic and Blocks) | custom with event_type: cart_updated and action |
| Checkout page view | custom with event_type: checkout_view |
| Checkout error / payment failure | payment_failed |
| Order received page | custom with event_type: order_received |
All events carry integration: woocommerce. Only coarse page-type context is sent — never product identifiers, prices, customer fields, or payment data.
Privacy and consent
- Privacy modes — strict (default), balanced, advanced, identical to the Shield SDK modes.
- Consent-aware initialization — with require consent enabled, the plugin starts in the configured pre-consent behavior (
strictordisabled) until your consent tool dispatches afindip:consentevent. - Compatible with High-Performance Order Storage (HPOS) and Cart/Checkout Blocks; telemetry failures never affect storefront behavior.
Server-side verification
Browser risk responses are informational. For decisions that matter (order review, fraud holds), verify the session server-side with your secret key — see Server Verification.