Free
$0 forever
No local usage cap
The complete local protection engine for one store or many.
- All Free protection layers
- Manual Emergency Mode
- 7-day event history
Pricing · Planned launch
Choose by production sites—not a stripped-down feature set.
All paid plans include the same Pro 1.0 features. Annual billing only at launch, with a 14-day refund policy.
MOST POPULAR
Pro
$59 per year
1 production site
Automatic response and better distributed detection.
- Everything in Free
- All Pro 1.0 features
- Priority support
Business
$119 per year
5 production sites
The same Pro engine for a growing store portfolio.
- Everything in Pro
- 5 production activations
- Staging sites excluded
Agency
$199 per year
25 production sites
The same Pro engine across client stores.
- Everything in Pro
- 25 production activations
- Staging sites excluded
Prices are planned launch pricing. Paid checkout is not active. Freemius will manage payment, tax, subscriptions, licensing, premium downloads, and premium updates.
Commercial terms
Clear boundaries from day one.
Annual only
No monthly or lifetime plan at launch.
Staging recognized
Local, development, and staging installations are planned not to consume production activations.
Free stays active
Baseline protection does not disappear if a paid license lapses.
Freemius commerce
Freemius handles checkout, tax, subscriptions, licenses, and premium delivery.
Pricing FAQ
The details agencies and merchants ask first.
What is card testing?
Card testing is an attacker sending stolen card details through a real checkout to learn which cards still work. Not every failed order is card testing, so patterns matter.
Is this a general fraud platform?
No. Checkout Firewall is intentionally focused on abusive checkout attempts. It is not KYC, AML, chargeback management, or a guarantee against every fraudulent transaction.
Does Free actually stop attacks?
Free includes the complete local protection engine, velocity controls, Turnstile, failed-payment lockout, Emergency Mode, logs, and recovery tools. It is not a timed or usage-capped trial.
Do I need a Codeprint account?
No. The Free plugin works locally without a Codeprint account or per-order Codeprint API.
Must I use Cloudflare as my CDN?
No. You can use Cloudflare Turnstile without routing your site through Cloudflare.
Does it inspect card numbers?
No. Checkout Firewall does not read, store, log, transmit, hash, inspect, or analyze raw card numbers, CVCs, or gateway payment payloads.
Does it protect Checkout Blocks and the Store API?
Yes. The product is designed for Classic Checkout, Checkout Blocks, and WooCommerce Store API checkout routes.
Will legitimate customers be blocked?
Any protection can be wrong. Standard Mode prefers a recoverable challenge when risk is uncertain, supports trusted-customer friction reduction, explains decisions, and makes temporary blocks easy to release.
What if Turnstile is unavailable?
Turnstile is one layer, not the entire product. The behavior is designed to be explicit and mode-aware, while local velocity and failure controls continue to operate.
What if my Pro license expires?
The Free core, Turnstile, fixed velocity rules, failed-payment lockout, and Emergency Mode remain active. Pro automation, alerts, new analytics, premium updates, and priority support require an active license.
Do staging sites consume licenses?
Recognized local, development, and staging installations are planned not to consume production activations.
Does it disable my payment gateway?
No. Checkout Firewall never automatically shuts down the entire gateway.
Which gateways are supported?
Compatibility depends on the checkout and gateway implementation. We publish only verified states in the compatibility matrix; untested gateways are never presented as tested.
Pre-launch · Be ready before the next burst
Put a control between checkout abuse and your payment gateway.
Checkout Firewall is being prepared for release. No download or paid checkout is live yet.