Trust & Security
Storefront protection, with control in your hands.
BotShield helps you understand suspicious activity, review the response, and decide what happens next. You can adjust how strict protection is, manage trusted and blocked visitors, and look through supported security events from your dashboard.
Where it applies
Protection on the storefront you already run.
- 01
On your storefront
BotShield runs with your Shopify theme. It can evaluate a visit that reaches that storefront check. Protection stays off until you enable it.
- 02
What a blocked visitor sees
They see BotShield's blocked page instead of the store. That page is part of the same storefront protection.
A visit that never runs that check may not be inspected. BotShield is not a firewall in front of your whole network.
How a decision is made
Allow, challenge, and block mean different things.
The visitor continues into the store.
Allow is the path through. Add an address to trusted visitors when you want it to continue past automatic blocking.
Low blocks only a very high score. Medium blocks sooner. High blocks at a lower score. These are settings, not a measured accuracy rate. If Auto Block is off, visits can still be scored and recorded, while automatic challenges and blocks stop. An address on your blocked list can still be stopped. Not every suspicious visit is blocked.
What you control
The settings that change the outcome.
01
Adjust sensitivity
Choose Low, Medium, or High. Low waits for a very high score. High acts at a lower score. Strict Mode turns Auto Block on, sets High, and then blocks at a lower score than High alone.
Information the product uses
What a visit record can include.
- The security event
- A recorded visit can include an IP address, browser, page path, threat level, action, risk score, and a short reason. Network and location details are included when they are available.
- How long those events are kept
- While BotShield is installed, storefront security events older than 30 days are removed. That removal covers those security events. It does not describe every other record the product may hold.
- Fraud Orders
- When you use Fraud Orders, it can show the order name, when it was created, the total, payment status, fulfillment, and the risk recommendation. It needs permission to read orders, and protected customer data may need approval before that queue loads.
More about access and retention
- Where the check runs
- Storefront protection uses the access required to run as a theme app embed. BotShield prompts when access for Fraud Orders is missing.
- What Fraud Orders does not request
- Fraud Orders does not request a customer's name, email, phone, billing address, or shipping address. Order details are loaded for review. They are not kept as a separate order archive.
- Network lookup
- A public IP address can be checked with a network lookup. The result is cached for 24 hours by IP address, not by store. Private and local addresses are not sent.
- When store data is deleted
- When a store's app data is deleted, BotShield removes that store's sessions, storefront events, blocked addresses, trusted addresses, and settings. Shared network-lookup results are not part of that deletion. They expire after 24 hours.
Good to know
What to expect in practice.
- A stricter setting can also stop a real shopper. If a customer says they could not get in, review that visit and adjust the rule.
- A risk label is a signal for you to review. It is not proof that someone is a bot, or that an order is fraud.
- The value view uses your assumptions and recorded activity. It is an estimate, not guaranteed savings or recovered revenue.
Scope and support
- BotShield does not replace checkout, cancel orders, or repay chargebacks.
- You review activity and change settings from the dashboard. BotShield does not include a staffed incident desk. Questions about your store go to Support or Contact Us.
Find the answer that matches the question.
The FAQ covers product questions. Support and Contact Us are there when you want a person to look at yours. Privacy and Terms describe how information and use of the product are handled.