Take control of who can reach your store — without slowing it down.

GeoShield evaluates every visit at the Cloudflare edge in under 100 ms (decision latency, KV-cached config). On Catalyst (headless), blocking happens server-side before BigCommerce renders. On Stencil, our edge-first script replaces content within ~200 ms on first visit and instantly thereafter via session cache. Built natively for multi-storefront merchants, with first-class support for headless Catalyst storefronts via a generated Next.js middleware.

Why GeoShield

• Block by country, IP, range, ASN, referrer, or user-agent — 200+ countries with one click, IPv4 + IPv6 + CIDR, and ASN-level granularity for advanced users.

• VPN, proxy and datacenter detection — every request is enriched with IPQualityScore reputation signals and you decide whether they're allowed (Premium and Enterprise).

• Multi-storefront protection across every channel you operate — pick a per-storefront rule scope, see exactly which channel each rule applies to, and roll out different policies across storefronts (Enterprise).

• Catalyst (headless) ready — paste a small Next.js middleware snippet we generate for your store hash and channel id, deploy, and your headless storefront is protected with true zero-flash server-side blocking.

• 10+ branded block page templates with a live editor — colors, logo, message, custom HTML and CSS for the Enterprise tier.

• OFAC sanctions mode — automatically block visitors from sanctioned countries with an immutable audit log and downloadable PDF compliance reports (Enterprise).

• Checkout protection — auto-cancel orders matching email, phone or name blacklists you control, written to your immutable compliance log (Enterprise).

How it works

We install one tiny script via the BigCommerce Script Manager (or a Next.js middleware for Catalyst). Every visit is checked against your rules at the Cloudflare edge in under 100 ms. Allowed visitors see your store. Blocked visitors see your branded block page or get redirected — within ~200 ms on first visit and instantly on subsequent visits in the same session via sessionStorage cache. Catalyst storefronts get true zero-flash server-side blocking.

Multi-region, multi-language ready

Block pages support custom HTML so you can localize messages per region. Country-specific redirects let you send blocked visitors to the right place.

Pricing

Start free, scale as you grow.

• Free — 3 countries + 2 IPs, 7-day analytics

• Basic — $4.99/mo — Unlimited rules, 30-day analytics, secret bypass links

• Premium — $9.99/mo — VPN/proxy/datacenter detection, 90-day analytics, product blocking

• Enterprise — $19.99/mo — Multi-storefront + Catalyst, OFAC compliance, checkout protection, REST API, 365-day analytics

Install now and protect your storefront in under 5 minutes with our guided onboarding.