A configured tag, not custom HTML
Site key, privacy mode, auto tracking and dataLayer options are template fields. Import the template once; the sandboxed template permissions are declared and reviewable.
Google Tag Manager
Visitor risk signals in Google Tag Manager, no code deploy required
Install FindIP Shield as a tag, not a code change. The official template takes your site key and privacy mode as fields, loads the SDK, and pushes each risk result to the dataLayer, where your analytics and other tags can use it.
Free Preview · 10,000 events per site per day · No credit card · Terms apply
VPN
Proxy
Tor
Hosting / datacenter
Risk score in dataLayer
VPN / proxy / Tor / hosting flags in dataLayer
The problem
The marketing stack owns the page. The security tool needs a deploy.
If every change to the site goes through a release, a security snippet waits in the queue behind features. Meanwhile the team that already runs tags, GA4 and conversion pixels could ship it this afternoon.
Shield meets them there. The tag template is configured with fields, not HTML, and the result of each event is pushed to the dataLayer like any other signal, so a GA4 event, a trigger or an audience can react to it.
The dashboard, the reasons and the per-form responses work exactly as with a code install.
What Shield shows you
The evidence, then the response you choose
Results in the dataLayer
With Push to dataLayer on, each scored event arrives as a findip_risk_result dataLayer push carrying the score, level, recommendation and the VPN, proxy, Tor, relay, hosting and malicious flags, ready for GA4 custom dimensions, triggers or audience rules.
Context flows the other way too
The SDK reads allowlisted fields from existing dataLayer entries, so a hashed user ID or a plan name you already push can be attached to the session.
Setup
Install through Google Tag Manager in three steps
For sites managed through GTM. Until the template is listed in the Community Template Gallery, import the template file; the steps are the same afterwards.
Import the tag template
Download the FindIP Shield template file and import it under Templates, Tag Templates, New, Import. The template is also published on GitHub.
Create the tag
Add a tag from the template, paste your public site key, choose the privacy mode, and keep Push to dataLayer on so results reach your other tags.
Publish and verify
Set the trigger to All Pages, publish the container, then return to the Shield install page to confirm the first event arrived.
Prefer another route? No tag manager? The script tag install is one line.
Boundaries
What a risk score is, and what it is not
An assessment, not proof. A VPN, a hosting network or a changing IP is common for privacy-conscious and corporate users too. Shield explains the reasons so you can decide; it does not pass judgement on a person.
Friction, not a security boundary. Anything decided in the browser can be bypassed by someone who controls it. For decisions that matter, verify the session from your server with your secret key.
Unknown is never safe. Where no intelligence was available the status is unknown. Shield fails open: if a decision does not arrive, the form submits as normal.
Questions
Frequently asked
Yes. The Shield install page generates a snippet with your site key and settings already filled in, which you can paste into a Custom HTML tag with an All Pages trigger.
Yes. Keep Push to dataLayer enabled, create a GA4 event tag triggered by the Shield dataLayer event, and map the score, level, recommendation and network flags to event parameters or custom dimensions.
No. Shield derives form activity from form attributes and the submit event only. Passwords, emails, phone numbers and payment fields are never read.
Per-form responses are configured in the Shield dashboard and executed by the SDK the tag loads, so yes, if you enable them. Nothing is enforced until you do, and it fails open.
Keep reading
Related
Start by watching one real flow.
Create a free Shield site, install it, and look at the first real event before you decide on any response.
Get my site keyFree Preview · Informational risk signals · You control enforcement