Loading…
Gate House Free & Pro · WooCommerce security
Start with Gate House Free for built-in keyless spam checks or optional human verification on supported WooCommerce forms. Add Pro for configurable attempt limits, card-testing and account-abuse checks, detailed activity and account cleanup. Choose checkout checks explicitly and test your store’s payment journeys.
What Free includes · What Pro adds
Both editions cover supported native WooCommerce forms. Keep Free active and add Pro for advanced controls. Use Coverage and test purchases to check your store’s setup before enabling checkout protection.
Choose built-in keyless checks or optional Turnstile, reCAPTCHA or hCaptcha on supported native checkout submissions. Checkout protection is an explicit choice; test guest and signed-in purchases and checkout account creation before enabling it.
Add checks to native sign-in, registration, password-reset and product-review forms, plus supported existing-order payment forms. Test existing-order payment links separately from a new purchase.
Review enabled forms, successful-use observations and aggregate blocked-attempt totals. Free includes the provider connection test. It does not include Pro’s detailed Activity history or the full Protection Test diagnostic probes.
Set local limits for repeated attempts, review generated-profile and repeated-identity patterns, and block or challenge known disposable email domains at sign-up. These Pro controls work without CAPTCHA keys, and a passed challenge cannot override an account-abuse block.
Count failed-order events recorded by WooCommerce per stored customer IP address and billing email, with checks for repeated identical totals and small-order bursts. Configure thresholds and use Observe mode to review advanced signals before enforcing them.
A fraud-blocked Checkout Blocks retry can hold its existing order with the reason recorded. Restore it to Pending after review, or separately delete an eligible unpaid order after acknowledgement and a 24-hour wait. Rate limits and provider errors never hold orders; orders are never deleted automatically.
Preview suspicious accounts, review their history and choose reversible restrictions. Quarantine preserves accounts and orders. Permanent account deletion is a separate guarded action and is unavailable when an account has linked orders.
Review individual attempts and recorded reasons in local Activity. Run the full Protection Test to check supported guards with labeled probes. Neither this test nor a successful provider connection replaces testing real buying journeys.
Protect Contact Form 7 and WPForms submissions when those plugins are active. Pro also adds attempt limits and abuse checks to authenticated legacy WooCommerce REST order creation (wc/v1–v3), where a browser challenge does not apply.
Gate House Pro · Card-testing checks
Pro checks patterns in failed-order events recorded by WooCommerce and order amounts on your own server. Free’s form verification remains available alongside these advanced controls.
Pro counts failed-order events recorded by WooCommerce, excluding manual status changes and duplicate deliveries of the same failure. These counts use the stored customer IP address and billing email; they do not prove how many card attempts a payment gateway processed. Pro’s amount checks also look for repeated identical totals and small-order bursts. Choose your thresholds and review advanced signals in Observe mode before deciding what to block.
Pro supports checks on native classic checkout, Checkout Blocks and existing-order payment forms. Authenticated legacy REST order creation (wc/v1–v3) has its own attempt limits and abuse checks. These adapters do not cover every custom order-creation or payment flow. Test your store’s routes and keep your payment processor’s fraud controls in place.
When a fraud signal blocks a Checkout Blocks retry whose session already references an order, Pro can hold that order with the block reason recorded. Review it under Gate House → Held orders in the WordPress sidebar (Settings → Gate House → Held orders on version 1.20.1 and earlier): restore it to Pending so a legitimate customer can pay through the existing link, or separately delete an eligible unpaid order after acknowledgement and a 24-hour wait. Rate limits and provider errors never hold an order, order-payment forms do not trigger these holds, and nothing is deleted automatically.
Gate House Pro · Account-abuse checks
Pro adds checks for suspicious account patterns on supported registration and payment routes. A successful CAPTCHA does not establish that an account or purchase is legitimate.
The Pro account guard checks combinations of generated profile fields and repeated identities. A shared business address, unusual name or incomplete profile alone does not trigger a match. Disposable-email checks use a local list. A matching pattern is a reason to investigate, rather than proof of payment fraud.
Use Observe — record matches to review account signals, or choose Block matching attempts when you are ready. Pro’s account-abuse protection works independently of the CAPTCHA provider and attempt limits, so a passed challenge cannot override its block.
Pro’s detailed Activity helps you review individual attempts. Both editions’ Coverage distinguishes recognized adapters and configured checks from successful-use observations. Retest affected forms after setup or rule changes. Read how Pro account protection is configured.
Start with Free · WooCommerce setup
A provider connection test verifies a challenge. Test sandbox purchases to check the buying paths your customers will use.
Open the installation and setup guide →On a staging copy, identify classic checkout or Checkout Blocks, My Account forms, reviews and existing-order payment links. Note express wallets, subscriptions, saved-card flows and custom forms for separate review. Free requires no Gate House account or license.
Choose built-in keyless checks, or register your staging hostname with an external provider and pass its connection test. Select Off, Invisible or Human check for supported forms. Enable checkout checks deliberately on staging so you can test them before applying the settings to production.
Keep Free active and install the matching Pro add-on. Configure attempt limits, account-abuse or card-testing checks for your store. Use Observe mode to review these advanced rules in Pro’s detailed Activity before enforcing them. Pro also provides the full Protection Test; Free includes the provider connection test.
Use each payment method you offer. Exercise guest and signed-in checkout where enabled, checkout account creation and the order-payment links your store uses. Check successful submissions and rejected attempts with the intended protection settings.
Inspect order outcomes, customer-facing messages, Coverage and blocked-attempt totals. With Pro, also review detailed Activity and any held orders. Confirm legitimate buyers can finish and resolve unexpected blocks before applying settings to production.
Repeat affected journeys after gateway, theme, checkout-extension or protection-rule changes. Keep your payment processor’s fraud controls and wider WordPress security practices in place.
Gate House Pro · Customer account cleanup
Pro’s account cleanup helps an authorized administrator investigate suspicious customers on a single-site installation while preserving order history. Free does not include account cleanup.
Choose a registration date range of up to 31 days. The preview reviews up to 2,000 customer accounts and shows matching reasons, order history and available actions. Inspect individual candidates before selecting a batch of up to 25 accounts.
Quarantine revokes sessions and blocks supported sign-in and checkout paths while keeping the account and all orders. Build a fresh preview to restore an account if your review finds a legitimate customer.
Permanent deletion requires at least 24 hours in quarantine, a fresh preview and no linked orders in any status or authored content. Privileged accounts and uncertain histories are protected. Gate House never deletes orders through cleanup. Read the account cleanup steps and limits.
Before you install
Understand the checks, the limits and what to test on your own site.
Get help with your setupFree includes built-in keyless checks and optional Turnstile, reCAPTCHA or hCaptcha on supported native checkout, My Account, order-payment and review forms. You also get coverage, the provider connection test and blocked-attempt totals. No Gate House account or license is required. External human checks need your own provider keys; built-in keyless checks do not.
Keep Free installed and active, then install the matching Pro add-on from your account. Pro adds its controls to the shared dashboard. Existing founding and lifetime licenses include Pro under their existing terms. Use the installation guide for setup or migration from the older complete edition, and compare Free and Pro before choosing.
Yes. Free and Pro both support native Checkout Blocks and classic checkout. Check Coverage, then test your actual forms and payment methods before enabling checkout protection. Pro adds configurable attempt limits and abuse controls to these supported journeys.
Yes. Pro counts failed-order events recorded by WooCommerce and checks repeated totals and small-order bursts. You choose thresholds and whether advanced signals are observed or blocked. This does not establish whether a payment card is legitimate, guarantee fraud prevention or replace your payment processor’s controls.
A fraud-blocked Checkout Blocks retry that already references an order can hold it for review under Gate House → Held orders in the WordPress sidebar (Settings → Gate House → Held orders on version 1.20.1 and earlier). Restore it to Pending so the customer can pay through their existing link, or delete an eligible unpaid order after acknowledgement and a 24-hour wait. Rate limits and provider errors never hold an order, order-payment forms do not trigger these holds, and held orders are never deleted automatically.
Automatic fallback during a provider outage is a Pro feature. When that fallback is enabled, supported enforced forms verify the built-in proof and record the decision in Activity; Pro can also be configured to fail closed. Free does not include this outage fallback. The built-in keyless mode in either edition operates locally without a CAPTCHA provider.
Yes. Pro’s account cleanup workflow lets you preview candidates, inspect their order history and choose reversible quarantine. Quarantine keeps the account and all orders. Permanent account deletion is separate, requires at least 24 hours in quarantine and a fresh review, and is unavailable for accounts with linked orders or authored content. Enabling form or abuse checks does not automatically delete customers.
No universal gateway compatibility is claimed. Native checkout support does not cover every express-wallet initiation, saved-card setup, subscription renewal or external gateway path. Requirements are WordPress 7.1+, PHP 8.1+ and WooCommerce 11.1.2+. Test each payment method and custom flow separately; the connection test alone does not verify checkout compatibility. See the coverage guide.
No. Free does not need a license, and installed Pro local protection continues after expiry. Automatic Pro updates and email support require an active license. Cloud reporting and management are optional services that require an active license and your explicit opt-in.
Protect supported forms with Free. Add Pro for advanced abuse controls and detailed activity, with updates and email support while your license is active.