# Cordon

> Cordon is a Shopify app that blocks bots, scrapers, VPN and proxy fraud, datacenter networks, and unwanted countries before they reach your store. Sub-50ms detection, fails open, never blocks Google.

Cordon is a paid Shopify app, live on the Shopify App Store:
https://apps.shopify.com/cordon

Key facts: detection decisions in under 50ms; fails open (an outage never blocks real customers); verified search engines and good bots (Googlebot, Bingbot, GPTBot, ClaudeBot, PerplexityBot, Ahrefs) are always allowed and cannot be blocked; visitor IPs are stored only as SHA-256 hashes with a daily-rotating salt (GDPR-safe); built as a theme app extension with no script tags.

## Main pages

- [Home](https://usecordon.com): what Cordon blocks and how
- [Features](https://usecordon.com/features): country blocking, VPN/proxy/Tor detection, bot and scraper detection, datacenter and ASN blocks, live visitor log
- [Pricing](https://usecordon.com/pricing): Free plan; Starter $9/mo; Growth $19/mo (adds VPN/proxy/Tor); Pro $49/mo (adds datacenter and scraper detection); Plus $99/mo (365-day logs, priority support); 7-day free trial on paid plans
- [About](https://usecordon.com/about): who builds Cordon and the principles behind it
- [Support](https://usecordon.com/support): support@usecordon.com
- [Privacy](https://usecordon.com/privacy) and [DPA/GDPR](https://usecordon.com/dpa)

## Use cases

- [Stop content scraping](https://usecordon.com/use-cases/stop-content-scraping): Detect and block the scrapers copying your Shopify product data, prices, and photos: headless browsers, python scripts, and datacenter crawl farms.
- [Block VPN checkout fraud](https://usecordon.com/use-cases/block-vpn-checkout-fraud): Block the VPNs, residential proxies, and Tor exits that card testers and serial refunders hide behind, without blocking privacy-conscious real customers.
- [Block traffic by country](https://usecordon.com/use-cases/block-traffic-by-country): Block visitors from any of 200+ countries on Shopify with a one-click flag picker, without touching your theme and without ever blocking Google.

## Comparisons

- [Cordon vs Blockify](https://usecordon.com/compare/cordon-vs-blockify): An honest comparison of Cordon and Blockify for Shopify: detection data quality, where blocking happens, performance cost, SEO safety, and GDPR handling.
- [Cordon vs Blocky](https://usecordon.com/compare/cordon-vs-blocky): Cordon vs Blocky for Shopify merchants: how the two apps compare on proxy detection quality, blocking architecture, SEO safety, and privacy.
- [Cordon vs Securify](https://usecordon.com/compare/cordon-vs-securify): Cordon vs Securify for Shopify: blocking architecture, scraper defense, right-click protection theater vs real detection, and GDPR-safe logging compared.
- [Best Shopify bot-blocker apps](https://usecordon.com/compare/best-shopify-bot-blocker-apps): an evaluation framework for the whole category

## Blog

- [Dozens of Tiny Failed Orders? You Are Being Card Tested](https://usecordon.com/blog/card-testing-attack-shopify): A run of small declined orders overnight is not a glitch. It is someone checking stolen cards against your checkout. Here is how to confirm it, stop it today, and keep your payment processor happy.
- [Is ChatGPT Scraping My Shopify Store? How to Tell, and What to Do](https://usecordon.com/blog/is-chatgpt-scraping-my-shopify-store): AI crawlers and shopping agents are visiting Shopify stores in growing numbers. Here is how to tell which ones are real, what they take, and why blocking all of them is usually the wrong call.
- [Someone Copied Your Product Listings. Here Is How They Did It](https://usecordon.com/blog/someone-copied-my-shopify-product-listings): Your descriptions and photos have turned up on a marketplace or a lookalike store. Here is how they were collected, what you can realistically stop, and what to do about the copy that already exists.
- [Can You Disable products.json on Shopify? The Honest Answer](https://usecordon.com/blog/shopify-products-json-disable): Every Shopify store publishes its full product list at /products.json with no password. Here is exactly what it exposes, why you cannot switch it off, and what actually reduces the damage.
- [Shopify Traffic But No Sales? Check Who Is Actually Visiting](https://usecordon.com/blog/shopify-traffic-but-no-sales): Sessions are up and orders are not. Before you rebuild the product page again, work out how much of that traffic is people. Here is how to check, and the boring causes to rule out first.
- [65% of One Store's Traffic Was a Single Scraper](https://usecordon.com/blog/shopify-scraper-traffic-case-study): A Shopify store took 33,700 visits in 22 hours. 21,840 came from one datacenter network. Here is how to find the same pattern in your own logs.
- [Does Shopify Block Bots and Countries by Default? (2026)](https://usecordon.com/blog/does-shopify-block-bots-and-countries): A clear answer on what Shopify blocks natively and what it does not. Shopify handles DDoS and platform security, but does not block bots, scrapers, VPNs, or countries at the visitor level.
- [Geo Restrict Your Shopify Store to Specific Countries](https://usecordon.com/blog/geo-restrict-shopify-store-to-countries): How to allowlist countries on Shopify so only your target markets can browse. Everyone else is blocked, and Google stays fully allowed for SEO.
- [How to Stop Bot Clicks and Fake Traffic on Your Shopify Ads](https://usecordon.com/blog/stop-bot-clicks-shopify-ads): Bots and click farms inflate your Shopify ad clicks and drain your Meta and Google budget. Here is how to spot invalid traffic and block it before it burns your ad spend.
- [How to Block Tor Traffic on Shopify (2026)](https://usecordon.com/blog/how-to-block-tor-traffic-shopify): Tor traffic is a common source of card testing and abuse on Shopify. Here is how to block Tor exit nodes on Shopify, why it is safe to do, and how it differs from blocking VPNs.
- [Shopify Store Security: A 2026 Checklist](https://usecordon.com/blog/shopify-store-security-checklist): Shopify secures the platform, checkout, and PCI. You own your accounts, apps, staff, and who you let in. A practical 2026 security checklist for merchants.
- [Stop Fake Account Signups and Form Spam on Shopify](https://usecordon.com/blog/stop-fake-account-signups-form-spam-shopify): Fake customer accounts and newsletter spam are automated bulk traffic. Block bots, proxies, and datacenter IPs at the visit to remove most of it without friction.
- [Disable Right-Click and Protect Images on Shopify](https://usecordon.com/blog/disable-right-click-protect-images-shopify): How to disable right-click on Shopify, why it is mostly theater against scrapers, and what actually stops competitors cloning your images and catalog at scale.
- [How to Block VPN on Shopify (2026 Guide)](https://usecordon.com/blog/how-to-block-vpn-on-shopify): Shopify has no built-in VPN block. Here is how to block VPN, proxy, and Tor traffic on Shopify in 2026 without blocking iPhone users on Private Relay or your real customers.
- [How to Stop Competitors Scraping Your Shopify Prices](https://usecordon.com/blog/stop-competitors-scraping-shopify-prices): Competitors run bots that poll your product pages and /products.json to undercut you. Here is how price scraping works and the detection that slows it down.
- [How to Block Checkout Bots on Shopify Drops](https://usecordon.com/blog/block-checkout-bots-shopify-drops): Checkout bots empty Shopify drops in seconds. What Shopify covers natively, how bots actually work, and how to block datacenter ASNs and headless browsers.
- [Reduce Chargebacks on Shopify by Blocking Fraud Traffic](https://usecordon.com/blog/reduce-chargebacks-shopify-block-fraud-traffic): Most chargeback tools act after the order exists. Blocking fraud traffic at the visit stops card testing before fees, disputes, and rate damage begin.
- [Should You Block AI Crawlers on Your Shopify Store?](https://usecordon.com/blog/should-you-block-ai-crawlers-shopify): For merchants, blocking GPTBot or ClaudeBot removes you from AI shopping answers. Allow verified AI crawlers, block the scrapers that impersonate them.
- [How to Block an IP Address on Shopify (2026 Guide)](https://usecordon.com/blog/how-to-block-an-ip-address-on-shopify): Shopify has no built-in visitor-level IP blocking. What Shopify can do natively, why theme hacks fail, and how to block IPs, ranges, and networks properly.
- [Shopify Bot Traffic: How to Spot It and Stop It](https://usecordon.com/blog/shopify-bot-traffic-how-to-spot-and-stop): Bot traffic on Shopify looks like a spike with zero extra sales and a collapsing conversion rate. How to recognize it in your reports and stop the bad bots.
- [How to Stop Discount Code Abuse on Shopify](https://usecordon.com/blog/stop-discount-code-abuse-shopify): Discount code abuse on Shopify: how one buyer farms welcome codes behind rotating proxies, why email limits fail, and how to block the anonymizing layer.
- [What Is an ASN? Blocking One Stops Thousands of Bots](https://usecordon.com/blog/what-is-an-asn-block-bad-bots): An ASN identifies a network operator like AWS or Comcast. Bot IPs rotate constantly but the ASN stays stable, so one ASN block can stop a scraper farm.
- [Blockify vs Cordon vs Blocky: Shopify Blockers Compared](https://usecordon.com/blog/blockify-vs-cordon-vs-blocky): A fair comparison of Blockify, Cordon, and Blocky across detection quality, blocking layer, performance, SEO safety, GDPR handling, and pricing.
- [Do Bot Blockers Hurt SEO? Block Bots, Not Google](https://usecordon.com/blog/do-bot-blockers-hurt-seo): A bot blocker only hurts SEO if it blocks verified crawlers. Learn how Googlebot verification works and how to block scrapers without losing rankings.
- [Shopify VPN Fraud: How to Stop Proxy Checkout Fraud](https://usecordon.com/blog/vpn-proxy-checkout-fraud-shopify): VPN and proxy checkout fraud hides stolen cards behind rotating IPs. Learn how to read the signals and block VPN traffic on Shopify before orders happen.
- [Stop Scrapers Stealing Your Shopify Product Catalog](https://usecordon.com/blog/stop-scrapers-stealing-shopify-product-catalog): Every Shopify store exposes its full catalog by default. Here is how scrapers take it, why robots.txt fails, and the detection layers that actually stop them.
- [How to Block a Country on Shopify (2026 Guide)](https://usecordon.com/blog/how-to-block-a-country-on-shopify): Shopify has no built-in visitor-level country block. Here are three ways to block a country on Shopify, from liquid hacks to purpose-built blocking apps.

## Full content

- [llms-full.txt](https://usecordon.com/llms-full.txt): full text of all key pages in Markdown