WordPromise
Log in
Sign up

WooCommerce security plugin by WordPromise

Stop bots before they
cost your store money.

Bot Shield blocks fake sign-ups, card testing, coupon guessing and review spam on your WooCommerce store. Real customers never see a puzzle, and you see everything it stopped on one clear dashboard.

3 months freeAll 14 protections · No card needed · Setup help included
Start my free 3 months See the dashboard

For WordPress 6.5+ and WooCommerce 8.0+ · Set up in minutes

Bot Shield Overview: protection ring showing 11 of 14 protections on, blocked attempts, and a Needs your attention list
2,189fake accounts found on the first store we protected
14protections, each with a simple on/off switch
0puzzles or extra steps for real customers
231automated checks pass before every release

The problem

Bots don’t just spam your store.
They cost you money.

General security plugins guard your login page. Bots go after the parts of a WooCommerce store they don’t watch.

Thousands of fake accounts

Bot sign-ups clutter your customer list, skew your reports and fill your inbox with “new account” emails.

Card testing at checkout

Criminals test stolen cards on small shops. Every decline costs a gateway fee and can get your merchant account flagged.

Coupon code guessing

Bots try code after code until one works, then share your discounts far beyond the customers you meant them for.

Spam reviews and emails

Junk product reviews hurt trust, and password-reset floods annoy customers and burn through your email allowance.

Features

14 protections, each with its own on/off switch

Every protection is explained in plain English inside the plugin. Switch on what fits your store; the defaults are safe.

Sign-ups

4 protections
  • Registration route lockBlocks bots posting straight to the sign-up handler when registration is off.
  • Honeypot, token and timing checksInvisible traps that catch bots but never real people.
  • Registration rate limitStops mass sign-ups from one visitor.
  • Disposable and SMS-gateway emailsRefuses throwaway inboxes bots use.

Checkout and payments

5 protections
  • Card-testing lockoutLocks out repeated failed payments, by IP, billing email and order.
  • Minimum order total for card paymentsCard testers love tiny orders; bank transfer and cash on delivery are never affected.
  • Checkout rate limitCaps “Place order” attempts per visitor.
  • Checkout honeypotA hidden trap field that only bots fill in.
  • Coupon brute-force lockoutStops bots guessing your discount codes.

Logins and passwords

3 protections
  • Failed-login lockoutPauses visitors who keep getting the password wrong.
  • Username scans blockedHides your usernames from bots scanning the site.
  • Password reset limitsStops bots flooding customers with reset emails.

Reviews and emails

2 protections
  • Review spam protectionCatches junk product reviews and sends them to Spam, never deleted.
  • Hourly account email capProtects your email sending allowance during a bot wave.

Plus the tools to stay on top of it

Overview dashboardWhat was blocked, and what needs you
Quick setupSuggests settings for your store
Store security checklistSpots risky payment and email settings
Activity log and alertsEvery block, plus emails when attacks spike
Suspicious accountsLists likely bot accounts to review
One-click unblockPlus an IP allowlist and blocklist

Limited-time offer

3months
free

The full plugin, every protection, and our help setting it up. No card, no catch.

Start my free 3 months

What you get

  • All 14 protections and every tool
  • Help from WordPromise to set it up for your store
  • Works alongside your existing security plugin
  • No payment details needed to start
  • Sign-up protection stays free forever after the trial

How it works

  1. Fill in the short form below.
  2. We email you Bot Shield and your licence key straight away, and help you set it up.
  3. Before the 3 months end, we remind you. Sign-up protection stays free forever; keep everything else for a small fee. Nothing is charged automatically.

See it in action

One dashboard that tells you what matters

Urgent problems first, then what was blocked, who was locked out and how protected your store is. Screenshots from a demo store with simulated bot traffic.

Bot Shield dashboard: chart of blocked attempts over 14 days, top block types, most blocked IPs, recent activity, lockouts, protection status and store checklist
Overview. Blocked attempts by day and type, the busiest IPs, a live activity feed, and one-click unblock.
Bot Shield Overview on a phone
Works on your phone. Check on your store from anywhere.
Checkout and payments protections with plain-English explanations and on/off switches
Protections. Every protection explained in plain English, with an on/off switch.
Activity log listing blocked attempts with time, event, IP and details
Activity log. Every blocked attempt, filterable by type and IP.

How it works

Protected in three steps

Install and add your key

Upload the plugin from your email, then paste your licence key under Settings. Sign-up protection starts working straight away.

Apply the suggested settings

Quick setup looks at your store and recommends what to switch on. Review the suggestions, then click Apply.

Let it watch your store

Bot Shield blocks attacks around the clock. Glance at the Overview whenever you like, or get an email if an attack spikes.

Why store owners like it

Strong protection, no friction for your customers

  • Invisible to real shoppersNo puzzles, no extra fields. Customers check out exactly as before.
  • Works with page cachingBuilt and tested for cached hosting, so its checks keep working on busy stores.
  • Plays well with your security pluginFills the WooCommerce gaps and detects your security and CAPTCHA plugins to avoid doubling up.
  • Your data stays on your siteNo third-party service and no external scripts. Only a once-a-day licence check with wordpromise.com (key and site address, never customer data).
  • Never deletes your dataCaught reviews go to Spam and suspicious accounts are only listed, so you stay in control.
  • Built and supported by WordPromiseMade by the team that maintains WordPress and WooCommerce sites every day.

Compatibility

WordPress6.5 or newer · tested up to 7.1
WooCommerce8.0 or newer · tested up to 11.2
PHP7.4 or newer · tested up to 8.4
CheckoutClassic and block checkout
MultisiteSupported (network activation)
LanguagesTranslation-ready

Bot Shield checks your versions automatically and tells you if WordPress, WooCommerce or PHP moves past what it has been tested with.

Questions

Frequently asked questions

Will Bot Shield slow my store down?

No. Its checks run only when someone submits a form, such as sign-up, checkout, login, coupon or review. Pages your visitors browse are not affected, and it works with page caching.

Could it block a real customer?

The checks are designed around how bots behave, not people. If a real customer is ever locked out, you can unblock them from the dashboard in one click, and you can allowlist your own IP so you never lock yourself out.

Do I still need my security plugin?

Yes, keep it. Bot Shield focuses on WooCommerce-specific attacks that general security plugins don’t cover, and its Quick setup recognises your security plugin so the two don’t overlap.

Does it delete fake accounts?

No. Bot Shield lists suspicious accounts and lets you export them for review. Removing them is always your decision.

What happens after the free 3 months?

Sign-up protection keeps working, free, for as long as you use Bot Shield. The other protections pause until you choose a paid plan for a small fee, and your settings are kept, so they come straight back on. We remind you before the trial ends, and nothing is charged automatically: we never ask for payment details to start.

Free for the first 3 months

Start your free 3 months

Fill in the short form and we email you the plugin and your licence key straight away. No payment details needed.

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Built and supported by