Stop scrapers from cloning your Shopify catalog
Detect and block the scrapers copying your Shopify product data, prices, and photos: headless browsers, python scripts, and datacenter crawl farms.
The problem
Every Shopify store publishes its catalog in machine-readable form, and scrapers know it. Competitors clone your product descriptions and photography, price trackers undercut you within hours of a change, and dropshipping copycats relist your bestsellers on their own domains.
The tooling is commodity: python-requests, Scrapy, Puppeteer, Selenium. Most of it runs from rented servers on AWS, Alibaba, or Tencent, or hides behind rotating residential proxies. robots.txt is a polite request they ignore.
How Cordon handles it
Fingerprint the tools
Scraping libraries and headless browsers leave markers real shoppers cannot fake. Cordon recognizes python-requests, Scrapy, Puppeteer, and Selenium signatures on the first request.
Watch the velocity
A human does not load 40 product pages in 30 seconds. Request-velocity detection catches scrapers that fake a clean browser but cannot fake human pacing.
Block the networks they rent
Almost no real customer shops from a datacenter. One click blocks AWS, Alibaba, Tencent, Huawei Cloud, and other hosting ASNs where crawl farms live.
Catch the fake Googlebots
Scrapers impersonate search engines to walk through allowlists. Cordon verifies crawlers against their real networks: a Googlebot UA from an Azure box gets blocked, the real Googlebot never does.
Set it up
- 1Install Cordon from the Shopify App Store (2 minutes, no theme edits)
- 2Enable the Anti-scraper preset
- 3Turn on datacenter blocking (Pro plan)
- 4Watch the live visitor log catch the first scrapers, usually within hours
Plans: Basic bot blocking works on every plan. Velocity-based scraper detection and datacenter blocks are on Pro ($49/mo). Anti-scraping decoy mode is on Plus ($99/mo). See pricing →
What it looks like
Click the screenshot to see it full size.
Frequently asked questions
Will scraper blocking affect Google indexing my products?
No. Verified search engines are always allowed and cannot be blocked. Verification checks the crawler's actual network, so only impostors get caught.
Can scrapers just switch to residential proxies?
Some try. Residential proxies defeat datacenter blocks but not velocity detection or headless markers, and Cordon's live proxy data flags known residential proxy exits too. Layered detection is the point: each evasion move costs the scraper more.
What is anti-scraping mode?
On the Plus plan, instead of showing scrapers a block screen (which tells them to adapt), Cordon can serve them decoy data. They keep scraping garbage without knowing they were caught.
How fast will I see results?
The live visitor log shows blocks in real time. Most stores with a scraping problem see the first catches within hours of enabling the Anti-scraper preset.
Ready when you are
Install free, enable a preset, and watch the live log do its work.
Free plan included, 7-day free trial on paid plans. Cancel anytime.