FindIP Shield reports explainable VPN, proxy, Tor, relay, hosting, datacenter, malicious-IP, and network-service signals for website activity.

The plugin provides:

Guided setup using a public Shield site key.
Strict, balanced, and advanced privacy modes.
Consent-aware initialization with strict or disabled pre-consent behavior.
Automatic page, session, and form-activity events without reading form values.
WooCommerce cart, checkout, payment-failure, and order-completion context.
Compatibility declarations for High-Performance Order Storage and Cart/Checkout Blocks.
Suggested disclosure text for the WordPress privacy-policy editor.

FindIP Shield provides risk signals, not proof of fraud. Do not automatically block a visitor only because they use a VPN, proxy, Tor, or hosting network. Important decisions should use server verification.

External services

This plugin connects to FindIP Shield, an external service operated by FindIP.

When configured, it downloads a pinned JavaScript SDK from https://cdn.findip.net and sends website events to https://shield.findip.net. The service receives the visitor IP address from the network connection and limited event metadata based on the selected privacy mode. It does not receive form values, passwords, payment details, or message contents.

The service is required for the plugin to provide risk intelligence. No connection is made until an administrator saves a valid public Shield site key.

Service: https://www.findip.net/shield/overview
Data collection: https://www.findip.net/docs/shield/data-collection
Privacy modes: https://www.findip.net/docs/shield/privacy-modes
Privacy policy: https://www.findip.net/Docs/privacy-policy
Terms: https://www.findip.net/docs/shield/terms-free-preview

Consent integration

With Require an explicit consent signal enabled, the plugin starts in strict or disabled mode. A consent-management plugin or theme can update Shield by dispatching:

document.dispatchEvent(new CustomEvent('findip:consent', { detail: { granted: true } }));

Send granted: false when consent is withdrawn.