Invisible telemetry probe
Silent, deferred storefront JavaScript collects device, browser, and interaction context.
The complete Skyfense feature set
Every layer of
protection, listed.
Skyfense is more than a bot blocker. It is a 42-capability detection and decision system covering storefront abuse, paid traffic, orders, storefront scripts, browser integrity, and merchant control. The catalog includes beta capabilities and explicitly marked planned integrations.
42protection capabilities
12detection sensors
4ad networks covered
<1sreal-time verdicts
Core detection
14 capabilitiesMulti-layer fingerprinting
Canvas, WebGL, audio, fonts, WebGPU, and hardware signals build a stable device identity.
Behavioral biometrics
Around 28 features analyze mouse movement, typing, scrolling, focus, and replay patterns.
Machine-learning classifier
An optional trained model adds bot-probability scoring from behavioral features. Beta; requires a deployed model.
Automation detection
Detect Selenium, Puppeteer, Playwright, WebDriver, headless APIs, and software-GPU environments.
Learn more ↗Environment spoofing
Cross-check user agent, rendering engine, WebGL, devices, permissions, and activation behavior.
Learn more ↗IP intelligence
Use VPN, Tor, proxy, hosting, ASN, abuser, and impossible-travel signals.
Invisible proof-of-work
A signed, session-bound SHA-256 challenge adds bot cost without showing a CAPTCHA.
Bot and crawler classification
Separate legitimate search crawlers from fake Googlebot traffic, scrapers, scanners, and unwanted bots.
Learn more ↗Checkout abuse detection
Flag sub-1.5-second checkout clicks, untrusted clicks, robotic trajectories, and automated form filling.
Learn more ↗Real-time decision engine
Combine signals into an explainable allow, challenge, or block verdict.
Privacy-aware scoring
Neutralize or discount noisy signals from legitimate private browsing.
Session hijack detection
Detect fingerprint drift below 67% similarity during an active session.
Multi-tenant isolation
Keep each merchant’s probe keys, sessions, settings, and dashboard data scoped separately.
Ad spend protection
07 capabilitiesAd click-fraud detection
Attribute Google, Meta, Microsoft/Bing, and TikTok clicks, then classify them as valid or invalid.
Learn more ↗Ad pixel reporting guard
Optionally suppress fraudulent Google, Meta, Microsoft, and TikTok pixel events.
Learn more ↗Google Ads spend sync
Connect Google Ads for daily spend sync and allocated campaign-day click costs, with a 90-day initial backfill. Pro beta.
Learn more ↗Refund evidence and claims
Export monthly invalid-click evidence and track claims you submit to Google. Credits are not guaranteed. Pro beta.
Learn more ↗Google Ads IP exclusions
With consent, sync up to 500 flagged IPs to enabled campaigns across connected accounts. Pro beta.
Learn more ↗Placement review and exclusions
Review Display and Performance Max spend, flag app inventory, and exclude selected placements. Pro beta.
Learn more ↗Ad spend dashboard
Review attributed sessions, invalid clicks, valid-click rate, networks, and every recent click labeled good or bad.
Learn more ↗Storefront integrity
02 capabilitiesOrder protection
04 capabilitiesShopify order risk review
Sync order webhooks into privacy-safe summaries matched to the storefront visit that produced them. Beta.
Learn more ↗Order blocklists
Flag orders by email domain, phone, or name, then review, tag, or optionally auto-cancel them. Beta.
Learn more ↗Pre-payment checkout block
A Shopify Function rejects blocklisted checkouts before an order is created. Beta.
Learn more ↗Shopify Flow automation
Trigger Flow on high-risk visits and orders, and mark an order for review from a Flow action. Beta.
Learn more ↗Traffic control
05 capabilitiesIP and network rules
Allow or block IPs and ranges, and redirect blocked visitors, from merchant-controlled settings.
Location rules
Block by country, or by state, city, and ASN for finer control.
VPN and Tor blocking
Optionally block anonymizing networks where they cause abuse for your store.
Repeat-offender blocking
Temporarily block a visitor after a set number of blocked visits inside a time window.
Configurable challenge modes
Choose silent proof-of-work, an interstitial check, Cloudflare Turnstile, or passive tagging.
Learn more ↗Integrations
03 capabilitiesShopify OAuth
Connect with a native install flow and automatic workspace provisioning.
Learn more ↗WooCommerce
Planned connector for WooCommerce stores.
Learn more ↗Threat intelligence feeds
Continuously ingest FireHOL, fake-Googlebot, open proxy, and daily-refreshed Bad Bot Blocker lists of bad user agents, spam referrers, and malicious IPs.
Merchant experience
07 capabilitiesSecurity dashboard
View metrics, session history, verdicts, signal breakdowns, and browser, OS, device, screen, GPU, and locale forensics for each visit.
Accounts and workspaces
Create a workspace independently from a commerce platform with secure account sessions.
Alert notifications
Get email or signed-webhook alerts for blocked visits and high-risk orders, with a one-click test send. Beta.
Scheduled reports
Daily or weekly email summaries of store visits and order risk. Beta.
Configurable data retention
Keep visit and order records for 30, 90, 180, 365, or 730 days, enforced by a daily cleanup.
Audit and delivery history
Review tenant-scoped audit events and the delivery history of every alert.
Asynchronous processing
Persist sessions and compute IP assessments in background workers off the request path.
Shared decision engine
Different signals.
One answer.
Visitor detection feeds a shared real-time scoring system that returns allow, challenge, or block, with supporting signals stored for your team. Google Ads tools add spend and campaign controls; scheduled script audits add a separate view of changes to your storefront code.
See bot protection ↗