One product, one job

Cordon is a Shopify app that blocks unwanted traffic (bots, content scrapers, VPN and proxy fraud, datacenter networks, and whole countries) before it reaches a merchant's storefront. It is the security cordon around your store: real customers pass through, the rest stops at the line.

It was built by Bas Lefeber, a Dutch developer and Shopify merchant, after watching his own portfolio stores eat scraper traffic and proxy-masked fraud that existing blockers, running on stale IP lists, waved straight through. Cordon operates from the Netherlands and serves merchants across the EU and US.

What we believe

• Detection is the product. Anyone can match a country to a list. Catching a residential proxy or a fake Googlebot requires live data and network-level verification.
• Never break the store. Cordon fails open. If our service hiccups, every visitor is allowed through. A security tool that can take your revenue offline is itself a threat.
• Never touch SEO. Verified search engines and good bots are always allowed and cannot be blocked, not even by your own rules.
• Privacy by structure. Visitor IPs are SHA-256 hashed with a daily-rotating salt. We cannot leak what we never stored.

The facts

• Live on the Shopify App Store
• Detection decisions in under 50ms
• Built as a theme app extension with an embedded admin, no script tags
• Support: support@usecordon.com

Questions, feedback, or a threat we do not catch yet? Email us. The person answering is the person who wrote the detection code. You can also read the blog to see how we think.