WooCommerce Protection
This is a Pro feature. It is off by default.
Enable WooCommerce Protection under Settings → ScraperBlock → Advanced.
Settings
| Setting | Default | Description |
|---|---|---|
| WooCommerce Protection | Off | Protect catalog pages with their own rate limit and separate logging |
| Strict rate limit | On | Use a separate per-minute limit for catalog pages |
| WooCommerce requests per minute | 120 | The catalog limit used when strict rate limiting is on |
Protected Pages
WooCommerce Protection applies to catalog pages:
- the Shop page
- single product pages
- product category and tag pages, and other product taxonomies
- product search results
Cart and checkout are excluded, so customers are never affected.
What Happens
- A bot on the blocklist requesting a catalog page gets the decoy page if content poisoning is on. Otherwise it's blocked with 403 Forbidden and logged as
woocommerce_scraping_blocked. - Any other visitor who isn't logged in is counted against the WooCommerce limit (WooCommerce Requests/Min, default 120) instead of the basic limit, when strict rate limiting is on. Over the limit they get 429 Too Many Requests and the request is logged as
woocommerce_rate_limit. This catches price scrapers that use a normal browser user agent.
These events feed the WooCommerce Protection Insights on the Analytics tab - Woo Blocks (24h) and Top Scraped Woo URLs - so you can see which products scrapers target.
WooCommerce Protection applies to bots that match the blocklist. Regular visitors aren't rate-limited.