# FindIP

> FindIP (findip.net) makes FindIP Shield, a visitor risk detection product for websites (browser SDK, Google Tag Manager, WordPress, WooCommerce, Shopify, and a no-code Cloudflare edge integration) and mobile apps (native iOS and Android SDKs, and WebView) that scores every visit, signup, login, lead and checkout by the network behind it, with the reasons. Shield is free (Free Preview) and is what the homepage https://www.findip.net/ leads with. The same IP intelligence (geolocation, proxy, VPN, Tor, hosting/datacenter, residential-proxy and malicious-IP detection) is also available directly through the free, unlimited FindIP lookup API. Support: info@findip.net. Security reports: security@findip.net.

Product names to use: "FindIP" (company and lookup API) and "FindIP Shield" (website visitor risk product). The Cloudflare capability is described as the "FindIP Shield integration for Cloudflare Workers", not as a separate product name. FindIP is not affiliated with, endorsed by, or a partner of Cloudflare, Shopify, or WordPress.

## FindIP Shield

Every Shield documentation page is also served as Markdown: append `.md` to its URL (for example https://www.findip.net/docs/shield/quickstart.md), or request the HTML URL with `Accept: text/markdown`. All Shield docs in one file: https://www.findip.net/llms-full.txt. Coding agents adding Shield to a project should follow https://www.findip.net/docs/shield/agent-install.md.

- [Shield overview](https://www.findip.net/shield/overview): network-based visitor risk scoring for signup, login, lead and checkout flows; explainable VPN/proxy/Tor/hosting/malicious signals; can stop, slow down, Turnstile-challenge or redirect risky submits on the forms the site owner picks (monitor-only until switched on); scores the network, not the device (no device fingerprinting); three privacy modes; server-side verification.
- [Shield documentation index](https://www.findip.net/docs/shield)
- [Quickstart](https://www.findip.net/docs/shield/quickstart): npm, script tag, or Google Tag Manager install.
- [JavaScript SDK reference](https://www.findip.net/docs/shield/javascript-sdk)
- [Mobile apps: iOS and Android SDKs](https://www.findip.net/docs/shield/mobile): a risk verdict (allow, monitor, challenge, block) on each signup, login and checkout in a native app, confirmed by the app's backend with server verification. iOS: Swift package `FindIPShield` (https://github.com/findip-net/findip-shield-swift), iOS 15+, no dependencies, privacy manifest. Android: `net.findip:shield-android` on Maven Central (https://github.com/findip-net/findip-shield-android), Android 8+, `INTERNET` permission only. No advertising IDs, no `identifierForVendor` or `ANDROID_ID`, no device fingerprint; emails and user IDs are hashed and encrypted on the device. Answers within 5 seconds and never returns allow without Shield's answer. Detects VPNs, proxies (including residential), Tor and hosting networks server-side, which on-device VPN checks (NEVPNManager, ConnectivityManager) cannot. Same Free Preview allowance as websites.
- [Events and payloads](https://www.findip.net/docs/shield/events)
- [Identify users and add context](https://www.findip.net/docs/shield/identify-users): attach a hashed user ID and business context to events via the dataLayer or FindIP.track(); never raw emails or usernames.
- [In-page enforcement](https://www.findip.net/docs/shield/enforcement): per-site setting that makes the SDK stop, slow down, Turnstile-challenge or redirect risky sign-up, login, checkout and lead submits; friction for bots, with the verify endpoint as the server-side boundary.
- [Privacy modes](https://www.findip.net/docs/shield/privacy-modes)
- [Data collection](https://www.findip.net/docs/shield/data-collection): exactly what is sent; never passwords, payment fields, form values, raw emails or phones.
- [Cookies](https://www.findip.net/docs/shield/cookies)
- [Server verification](https://www.findip.net/docs/shield/server-verification)
- [Server verification, OpenAPI 3.1](https://www.findip.net/docs/shield/openapi.json): machine-readable description of `POST https://shield.findip.net/v1/shield/sessions/verify`, the one public server endpoint: request, every response field, error responses.
- [Threat Network](https://www.findip.net/docs/shield/threat-network)
- [Free Preview, explained](https://www.findip.net/shield/free-preview): what is free (10,000 recorded events per site per day, every feature, no card, no trial clock, no paid plan today), what "preview" means, why it is free, what is shared, the 90 days' notice promised before anything free changes, and how the allowance compares with other vendors' free tiers.
- [Free Preview terms](https://www.findip.net/docs/shield/terms-free-preview)

## FindIP Shield integration for Cloudflare Workers

- [Product page](https://www.findip.net/shield/cloudflare): no-code edge protection for a Cloudflare-proxied hostname. Authorize with Cloudflare OAuth (domain-verified publisher, four permissions), pick one hostname, and Shield deploys exactly one Worker and one route. Starts in Monitor mode (never blocks); Balanced mode (explicit opt-in) blocks only high-confidence bad traffic with a plain 403. Fails open: any FindIP failure forwards the request unchanged. The Worker sends only visitor IP, hostname, path and method. Free.
- [Documentation](https://www.findip.net/docs/shield/cloudflare): requirements, connect flow, modes, full policy reference (allow/block lists, verified bots, path rules, sensitivity, block categories, country block/allow-only, AI-crawler policy, custom access rules, IP-rotation defense), lifecycle (pause, resume, upgrade, rollback, remove, disconnect), failure matrix, permissions rationale, data inventory, troubleshooting, support.

## Shield integrations

- [Google Tag Manager](https://www.findip.net/docs/shield/google-tag-manager)
- [WordPress](https://www.findip.net/docs/shield/wordpress)
- [WooCommerce](https://www.findip.net/docs/shield/woocommerce)
- [Shopify product page](https://www.findip.net/shopify) and [Shopify documentation](https://www.findip.net/docs/shield/shopify)

## Lookup API

- [API response reference](https://www.findip.net/Docs/api-response)
- Client examples: [Python](https://www.findip.net/Docs/api-python), [JavaScript](https://www.findip.net/Docs/api-javascript), [C#](https://www.findip.net/Docs/api-csharp), [PHP](https://www.findip.net/Docs/api-php), [Go](https://www.findip.net/Docs/api-go), [Java](https://www.findip.net/Docs/api-java), [Ruby](https://www.findip.net/Docs/api-ruby), [Kotlin](https://www.findip.net/Docs/api-kotlin)
- Capability pages: [proxy detection](https://www.findip.net/proxy-detection-api), [VPN detection](https://www.findip.net/vpn-detection-api), [Tor detection](https://www.findip.net/tor-detection-api), [IP reputation](https://www.findip.net/ip-reputation-api), [datacenter IP detection](https://www.findip.net/datacenter-ip-detection), [IP geolocation](https://www.findip.net/ip-geolocation-api), [residential proxy detection](https://www.findip.net/residential-proxy-detection), [public DNS resolver detection](https://www.findip.net/public-dns-resolver-detection)

## Shield use cases

Problem-first pages: what goes wrong, what Shield shows, the install route that fits, and the boundaries of a risk score.

- [All Shield solutions](https://www.findip.net/shield/solutions): every use case below grouped by flow (signups and trials, logins, online stores, traffic quality), with install routes and guides.
- [Detect fake signups](https://www.findip.net/detect-fake-signups)
- [Free trial abuse prevention](https://www.findip.net/free-trial-abuse-prevention)
- [Free-tier abuse on AI apps](https://www.findip.net/ai-free-tier-abuse)
- [Multi-accounting detection](https://www.findip.net/multi-accounting-detection)
- [SMS pumping prevention](https://www.findip.net/sms-pumping-prevention)
- [Detect VPN and proxy users in an iOS app](https://www.findip.net/ios-vpn-detection): why an on-device VPN check is not enough, the Swift package, backend verification.
- [Detect VPN and proxy users in an Android app](https://www.findip.net/android-vpn-detection): why TRANSPORT_VPN is not enough, the Maven Central library, backend verification.
- [VPN and proxy signup detection](https://www.findip.net/vpn-proxy-signup-detection)
- [Checkout fraud signals](https://www.findip.net/checkout-fraud-signals)
- [VPN, proxy and Tor detection for WordPress and WooCommerce](https://www.findip.net/wordpress-vpn-proxy-detection)
- [VPN, proxy and bot traffic on Shopify storefronts](https://www.findip.net/shopify-bot-vpn-detection)
- [Visitor risk signals in Google Tag Manager](https://www.findip.net/google-tag-manager-visitor-risk)
- [Bot and automated traffic detection by network](https://www.findip.net/bot-traffic-detection-website)
- [Paid traffic quality by campaign](https://www.findip.net/paid-traffic-quality)
- [Login abuse detection](https://www.findip.net/login-abuse-detection)
- [Spam lead and contact form submissions](https://www.findip.net/spam-form-submissions)
- [Rotating proxy traffic on Cloudflare sites](https://www.findip.net/rotating-proxy-traffic)

## Guides

- [Visitor risk scoring for signup and checkout](https://www.findip.net/Docs/visitor-risk-scoring-signup-checkout)
- [Visitor risk scoring vs CAPTCHA vs rate limiting](https://www.findip.net/guides/visitor-risk-scoring-vs-captcha-vs-rate-limiting): what each control sees and misses, and how to layer them.
- [Detect risky signups without blocking VPN users](https://www.findip.net/guides/detect-risky-signups-without-blocking-vpn-users): policy by signal combination, challenge instead of block, server-side decision.
- [FindIP Shield vs Fingerprint vs IPQualityScore](https://www.findip.net/compare/findip-shield-vs-fingerprint-vs-ipqualityscore): factual comparison table; Shield's no-code dashboard, install routes for site owners and developers, unlimited API calls (fair usage) with 10,000 recorded events per site per day.
- [IPQualityScore alternative](https://www.findip.net/compare/ipqualityscore-alternative): Shield scores visits and forms on the site with reasons and a dashboard response; when IPQualityScore's lookup APIs (email, phone, transactions) fit better.
- [Fingerprint alternative](https://www.findip.net/compare/fingerprint-alternative): network risk scoring versus device identification; when Fingerprint is the right tool, and using both.
- [reCAPTCHA alternative](https://www.findip.net/compare/recaptcha-alternative): score every visitor by network with reasons, challenge only the risky with Cloudflare Turnstile; reCAPTCHA tiers and when to keep it.
- [Understanding IP geolocation services](https://www.findip.net/Docs/understanding-ip-geolocation-services)
- [IPv4 and IPv6](https://www.findip.net/Docs/ipv4-and-ipv6)

## Company

- [About FindIP](https://www.findip.net/about): who builds FindIP and FindIP Shield, how the products are run, what is never collected, where to reach us.
- [Contact](https://www.findip.net/Home/Contact)
- [Privacy policy](https://www.findip.net/Docs/privacy-policy)
- [Terms of service](https://www.findip.net/Docs/terms)
- Open-source SDK: https://github.com/findip-net/findip-shield-js · npm: https://www.npmjs.com/package/@findip/shield
- Shield framework examples (Next.js, React, Vue, Astro, SvelteKit, plain HTML) and a coding-agent skill: https://github.com/findip-net/findip-shield-examples
- FindIP MCP server for AI assistants (`npx -y @findip/mcp`): IP lookups, a Shield site's recent risky events and the reasons behind one event, with a FindIP API key. npm: https://www.npmjs.com/package/@findip/mcp · source: https://github.com/findip-net/findip-mcp