WebDecoy is now on Shopify: inspect bot signals before fulfilling orders
WebDecoy is now approved and publicly listed on the Shopify App Store. I’m Chris, the founder.
The app connects suspicious storefront activity with order review inside Shopify admin:
• Browser behavior, request signals, IP enrichment, and hidden honeypot interactions provide detection evidence.
• Actor profiles help investigate related activity across sessions and IPs where correlation is available.
• Flagged Orders provides review status and notes; supported plans add order tagging, native Shopify risk assessments, and Shopify Flow triggers.
• AI Crawlers and AI Referrals are separate reports, so catalog retrieval and visitors sent by AI assistants are not mixed together.
Install the app, enable the theme app embed, and use Setup & health to verify a labeled test. The Free plan includes 500 detections/month.
Order review stays under the merchant’s control. The order-created handler does not independently cancel orders or block checkout. Cancellation requires a separately configured and enabled Flow action. Orders need matching session evidence, and clients that neither execute JavaScript nor touch a decoy may not appear in storefront reports.
Short demo and setup guide:
Install on Shopify:
https://apps.shopify.com/webdecoy-bot-protection
The demo uses a test store and seeded data. This update was prepared with AI assistance and checked against our published app documentation.
For Shopify merchants and developers: what evidence would make an order-review alert useful to your team?
Replies