Free Preview · 10,000 events/site/day

See the risk behind every website visit.

FindIP Shield adds privacy-conscious visitor risk intelligence to signup, login, lead, and checkout flows—without collecting passwords, payment details, or form values.

Start with Shield free See an example
  • npm, script tag, or GTM
  • No credit card
  • Three privacy modes
22-second overview

See a visitor move from signup to risk decision

Follow one simple flow from website activity to an explainable risk score and recommended response.

  • See where Shield fits in the visitor journey
  • Understand the score and response flow
  • Continue to the two-minute setup when ready
How FindIP Shield worksSignup → risk score → response

Risk signals that make website activity explainable

Turn raw visits into clear, inspectable context before adding friction to legitimate customers.

VPN, proxy, and Tor

Recognize anonymized and relayed traffic across common visitor journeys.

Hosting and datacenters

Separate consumer access networks from automated infrastructure.

Network rotation

See IP, ASN, and country changes inside a visitor session.

Malicious infrastructure

Surface scanner, malicious-IP, and reputation signals with reasons.

From installation to useful signal in four steps

Shield is designed for visibility first. Review the evidence in your dashboard, then decide how your application should respond.

Create a Shield site

Add the domain you control and select the privacy mode appropriate for your visitors.

Install one snippet

Use the npm package, a versioned CDN script, or Google Tag Manager.

Receive risk events

Signup, login, lead, checkout, and page activity become searchable events and sessions.

Investigate patterns

Review scores, reasons, infrastructure, and network changes without treating missing intelligence as safe.

Developer friendly

Install in minutes, keep control in your application

Shield returns informational risk signals and recommendations. Your server remains the authority for access, payment, or fraud decisions.

View on npm Read the implementation guide Use the no-code Cloudflare integration 
npm install @findip/shield

import { init, track } from '@findip/shield';

init({
  siteKey: 'pub_xxxxxxxxx',
  privacyMode: 'balanced',
  autoTrack: true
});

await track('signup_attempt');

Privacy choices are part of the product

Choose how much browser context is appropriate. Shield never needs passwords, card data, or full form contents.

Strict

Minimum context. Use infrastructure-level signals with the smallest browser footprint.

Balanced

Recommended default. Add limited browser and session context for more useful investigation.

Advanced

More diagnostic context. Enable only when your notices, consent, and use case support it.

Limits, and what Shield does not do

The honest edges of the product, so you can judge whether it fits before you install anything.

What are the Free Preview limits?

Each site has a daily event quota — 10,000 events per day by default — plus per-minute rate limits. Beyond them, ingest answers 429 and those events are not recorded. Cloudflare edge requests are counted separately from browser events. See the Free Preview terms.

Is Shield a security boundary?

No. In-page enforcement is friction against bots and casual abuse. A determined attacker controls the browser, so anything decided there can be bypassed. For decisions that matter, verify the session from your server with your secret key — that is a decision no client can bypass.

What can Shield actually do when it sees something risky?

On a form you configure, Shield can monitor only, slow the submit down, ask for a Cloudflare Turnstile challenge, block the submit, or redirect. On a Cloudflare-connected hostname it can report traffic and apply the access rules you set. It never acts on a form you have not configured.

What happens if Shield is slow or unavailable?

The SDK fails open: if a decision does not arrive, the form submits as normal. Shield being down does not take your forms down with it.

Does a high risk score mean the visitor is malicious?

No. A score summarizes network signals — a VPN, a hosting network, or a changing IP are common for privacy-conscious and corporate users too. Shield explains the reasons so you can decide; it does not pass judgement on a person. Where no IP intelligence was available, the status is unknown — treat that as unknown, never as safe.

What does Shield collect?

Never passwords, card details, or the contents of form fields. How much browser and session context is collected depends on the privacy mode you choose, and some context features are opt-in. The specifics are in data collection and privacy modes.

Does using the FindIP API give me Shield data?

No. The API answers questions about an IP you send it. Shield reports the activity on a site where it is installed. The same account covers both.

Start seeing visitor risk today.

Create a free Shield site, install the SDK, and receive your first risk event. No credit card required.

Start with Shield free

Free Preview · Informational risk signals · Terms apply