Monitor
What is happening on your store right now, and what already got through.
- Live Attack Monitor
- Orders Risk Review
- Checkout Attempts
- Session Monitor
Submitted — awaiting App Store approval
Fraud protection that tells you what it can't block
No Shopify app can block your storefront checkout — Shopify controls that page. What FlexifyGuard does is score every order the moment it is created and cancel the ones that fail within seconds through Shopify’s Admin API. We lead with the limitation because you would find it out anyway, and better from us than from a chargeback.
First three are product artwork. The rest are screens from the app — test-store data, with an IP address and one email domain blurred for privacy.
The mechanism
How it actually works
Four steps, running on every order. The thresholds are yours to set.
- 01
An order is placed
Shopify fires the orders/create webhook the moment a customer completes checkout.
- 02
FlexifyGuard scores it
Device fingerprint, VPN and proxy detection, bot signals, country, checkout velocity, email reputation and your own rules combine into one score out of 100.
- 03
The score meets your thresholds
Flag at 40, review at 60, cancel at 85 by default. Four presets ship: Learning, Standard, Strict and Custom.
- 04
The action runs
Cancel via the Admin API, hold for manual review, or allow — within seconds, before fulfilment.
The system
Eighteen modules, five areas
Fraud tooling is only useful if you can see what it did and why. FlexifyGuard splits into monitoring, active protection, the intelligence behind the scoring, and the automation that acts on it.
Protection
The rules and lists that decide which orders get cancelled.
- Rules Builder
- IP & Country Control
- Bot Protection
- Payment Protection
- Email & Domain Blocklist
- Customer Blacklist
- Product Abuse Detection
Intelligence
The signals behind every score — device, behaviour and the wider network.
- Device Fingerprints
- Chargeback Predictor
- Fraud Analytics
- Threat Intel Network
Automation
What happens without you, and how loudly it tells you.
- Auto Actions
- Alerts & Notifications
- Fraud Response Mode
Feature by feature
Every module, and what it actually does
These are screens from the app. Where a module has a limit, the app states it — and so does this page.
Rules BuilderGrowth+
Combine device risk, VPN and proxy detection, bot signals and country into IF/THEN rules evaluated live on every checkout. Ships with working defaults for bot signatures, suspicious countries and card-testing patterns.
Bot ProtectionGrowth+
Detects headless browsers, Selenium and Puppeteer automation, with a JavaScript challenge and rate limiting for suspicious IPs. This is the card-testing defence, because card testing is automated by definition.
Payment ProtectionFree+
Scores real payment attempts and cancels those that fail. The panel is clear that 3D Secure and AVS live in Shopify Payments and FlexifyGuard cannot override them — it adds rule-based checks on top rather than replacing them.
IP & Country ControlStarter+
Block single IPs, CIDR ranges or whole countries. Each block can optionally be shared with the FlexifyGuard network so other merchants are protected from the same address.
Email & Domain BlocklistStarter+
The panel states plainly that a blocklisted address cannot be stopped from reaching Shopify checkout. FlexifyGuard detects the match once the order lands, cancels within seconds, and alerts you.
Customer BlacklistStarter+
Matches on email, phone and Shopify customer ID. An allowlisted customer always wins — even over a blacklist match — so a good customer cannot be caught by a broad rule.
Product Abuse DetectionPro+
Scans your catalogue for policy-violating listings, with an AI second pass on ambiguous matches. The app notes that counterfeit and copyright flags are language-pattern indicators, not legal determinations, and nothing is removed without your review.
Device FingerprintsGrowth+
Tracks unique devices across visits even when the IP or email changes, and marks VPN and proxy users — catching the repeat offender who assumes a new email is a new identity.
Threat Intel NetworkAll plans
When a checkout scores 90 or above on any store running FlexifyGuard, that IP is reported and blocked across the whole network. Manual blocks are shared after verification, so protection improves as more stores join.
Auto ActionsPro+
The three thresholds that classify every order, plus a switch for whether risk score alone can cancel without a blocklist match.
Protection presetsAll plans
Learning observes and rarely acts. Standard is the balanced default. Strict reviews and cancels aggressively. Custom hands you the numbers. Start on Learning while you calibrate.
Fraud Response ModePlus
For a live attack: forces review or auto-cancellation and terminates active sessions. The panel lists what it does not do, and calls Bulk Session Response a blunt instrument that logs out legitimate browsers too.
Pricing
From $0 per month
Four subscription tiers, billed monthly or yearly. Storage and user limits rise with each tier; the full comparison and current terms live on the product site.
- Free $0/month
- Starter $14.99/month
- Growth $29.99/month
- Pro $59.99/month
- Plus $149.99/month
Prices in US dollars, as published on the FlexifyGuard site. See full FlexifyGuard pricing and plan limits.
Who it suits
Built for teams that outgrew spreadsheets
Stores hit by card testingElectronics, gift cards and high-value fashionStores with a chargeback problemMerchants shipping internationallyAnyone manually reviewing every suspicious orderStores that have had a fraud spike once already
Questions
Frequently asked
Can FlexifyGuard block a fraudulent order before checkout?
No, and no Shopify app can — Shopify controls the checkout page. FlexifyGuard scores each order the moment it is created and cancels high-risk ones within seconds through Shopify's Admin API, before fulfilment. Any app claiming to block checkout outright is describing something the platform does not permit.
How does FlexifyGuard stop card testing?
Card testing is automated, so the defence is bot detection. FlexifyGuard identifies headless browsers, Selenium and Puppeteer automation, applies a JavaScript challenge and rate-limits suspicious IPs. Repeated payment attempts from one device fingerprint are blocked by rule, and offending IPs are shared across the network.
What happens to a legitimate order that gets flagged?
It goes to Orders Risk Review with the triggering risk factors listed, so you decide. You control all three thresholds, and an allowlisted customer bypasses fraud scoring entirely, even over a blacklist match. The Learning preset observes without acting while you calibrate.
What is the Threat Intel Network?
Shared fraud intelligence across every store running FlexifyGuard. When a checkout scores 90 or above anywhere on the network, that IP is reported and blocked for all protected merchants in real time. Manual blocks are shared after verification, so protection improves as the network grows.
Does FlexifyGuard replace Shopify's own fraud analysis?
No, it runs alongside it. 3D Secure and AVS are configured in Shopify Payments and FlexifyGuard cannot override them. It adds rule-based checks, device fingerprinting, bot detection and network intelligence on top of what Shopify already provides.
How much does FlexifyGuard cost?
There is a free plan covering 100 orders a month. Paid plans are $14.99, $29.99, $59.99 and $149.99 a month, with 20% off annual billing. Everything is billed through Shopify, so you manage or cancel it from your Shopify admin.
Want to see FlexifyGuard on your business?
The team that wrote FlexifyGuard is the team that answers when you message. Start on the product site, or ask us which modules fit the way you already work.