Skyfense
The complete Skyfense feature set

Every layer of
protection, listed.

Skyfense is more than a bot blocker. It is a 23-capability detection and decision system covering storefront abuse, paid traffic, browser integrity, and merchant visibility.

23protection capabilities
12detection sensors
4ad networks covered
<1sreal-time verdicts
Core detection
14 capabilities

Invisible telemetry probe

Silent, deferred storefront JavaScript collects device, browser, and interaction context.

Multi-layer fingerprinting

Canvas, WebGL, audio, fonts, WebGPU, and hardware signals build a stable device identity.

Behavioral biometrics

Around 28 features analyze mouse movement, typing, scrolling, focus, and replay patterns.

Machine-learning classifier

A scikit-learn model produces a bot probability after at least 5 session events.

Automation detection

Detect Selenium, Puppeteer, Playwright, WebDriver, headless APIs, and software-GPU environments.

Learn more ↗

Environment spoofing

Cross-check user agent, rendering engine, WebGL, devices, permissions, and activation behavior.

Learn more ↗

IP intelligence

Use VPN, Tor, proxy, hosting, ASN, abuser, and impossible-travel signals.

Invisible proof-of-work

A signed, session-bound SHA-256 challenge adds bot cost without showing a CAPTCHA.

Bot and crawler classification

Separate legitimate search crawlers from fake Googlebot traffic, scrapers, scanners, and unwanted bots.

Learn more ↗

Checkout abuse detection

Flag sub-1.5-second checkout clicks, untrusted clicks, robotic trajectories, and automated form filling.

Learn more ↗

Real-time decision engine

Combine signals into an explainable allow, challenge, or block verdict.

Privacy-aware scoring

Neutralize or discount noisy signals from legitimate private browsing.

Session hijack detection

Detect fingerprint drift below 67% similarity during an active session.

Multi-tenant isolation

Keep each merchant’s probe keys, sessions, settings, and dashboard data scoped separately.

Ad spend protection
03 capabilities

Ad click-fraud detection

Attribute Google, Meta, Microsoft/Bing, and TikTok clicks, then classify them as valid or invalid.

Learn more ↗

Ad pixel reporting guard

Optionally suppress fraudulent Google, Meta, Microsoft, and TikTok pixel events.

Learn more ↗

Ad spend dashboard

Review attributed sessions, invalid clicks, valid-click rate, networks, and recent invalid traffic.

Learn more ↗
Integrations
03 capabilities

Shopify OAuth

Connect with a native install flow and automatic workspace provisioning.

Learn more ↗

WooCommerce

Planned connector for WooCommerce stores.

Learn more ↗

Threat intelligence feeds

Continuously ingest FireHOL, fake-Googlebot, and open proxy lists.

Merchant experience
03 capabilities

Security dashboard

View metrics, session history, verdicts, signal breakdowns, and raw captured state.

Accounts and workspaces

Create a workspace independently from a commerce platform with secure account sessions.

Asynchronous processing

Persist sessions and compute IP assessments in background workers off the request path.

Shared decision engine

Different signals.
One answer.

All of these capabilities feed the same real-time scoring system. The response is allow, challenge, or block, with the signals that contributed stored for your team.

See bot protection ↗