Bot protection,
ad fraud, and what we ship.
Notes on how bots and fraud actually behave, how to stop them without frustrating real shoppers, and what's new in Skyfense.
WooCommerce support is on the roadmap
Skyfense runs on Shopify today. Here's what to expect as WooCommerce support is built out, and how to get on the list.
Session hijacking and fingerprint drift: what changes when an account is taken over
A hijacked session usually still has a valid login. What changes is everything underneath it, and that's what a fingerprint-drift check is built to notice.
Fake Googlebot is more common than you think
Anyone can put 'Googlebot' in a user agent string. Here's how to tell the real crawler from scrapers, scanners, and impersonators without blocking the traffic you actually want.
Inside a headless browser: how automation actually gets caught
Selenium, Puppeteer, and Playwright all leave marks. Here's what they look like from the storefront side, and why headless traffic is easier to catch than bot operators think.
TikTok and Microsoft Ads: the invalid-click problem nobody is watching
Most click-fraud attention goes to Google and Meta. TikTok and Microsoft/Bing campaigns see the same problem, with a lot less tooling built to catch it.
How checkout bots drain your inventory before real customers see it
Sneaker bots and scalping scripts can empty a limited drop in seconds. Here's how they work and how to stop them.
The invalid clicks quietly eating your Google and Meta ad budget
Invalid clicks don't show up as a line item. They show up as a worse ROAS you can't explain. Here's what causes them and how to filter them out.
Card testing: the automated fraud that costs you before a human ever sees it
Card testing scripts run stolen card numbers through your checkout in bulk, looking for ones that work. Here's how it shows up and how to catch it early.
CAPTCHA vs. invisible detection: what actually stops fraud without losing sales
CAPTCHAs punish every visitor to catch a few bots. Invisible, behavior-based detection can do better without the friction.
New: the ad spend dashboard is live
See attributed sessions, invalid clicks, and valid-click rate across Google, Meta, Microsoft, and TikTok in one place.