Plugins
Configuring risk thresholds in plugins
Understand what tag and block thresholds to set in WooCommerce and WordPress plugins.
What are risk thresholds?
Risk thresholds control how the plugin responds to different risk scores. There are two key thresholds:
Tag threshold (recommended: 40)
Orders or login attempts scoring above this value are flagged/tagged for manual review but not blocked. This gives you visibility without rejecting legitimate users.
Block threshold (recommended: 70)
Orders or login attempts scoring above this value are blocked outright. Only enable this after you've monitored tagged results and are confident in the threshold.
Recommended starting configuration
| Setting | Value | Reason |
|---|---|---|
| Mode | Block High Risk | Stops fraud automatically without manual review |
| Tag threshold | 40 | Flags medium+ risk for visibility |
| Block threshold | 70 | High-confidence threats only |
| Block VPNs | On | Most fraud arrives via VPN — safe to block |
| Block Tor | On | Very high fraud correlation |
| Block datacenter IPs | On | Bots and scrapers use cloud IPs |
Tuning your thresholds
- Start in Block High Risk mode — this blocks scores above 70 automatically
- Review your admin event log after the first few days
- If legitimate customers are being blocked, raise the threshold to 75–80
- Lower the threshold toward 60 if you want to catch more borderline cases
Where to configure
- WordPress: Predax Security → Settings (in the WordPress admin sidebar)
- WooCommerce: WooCommerce → Settings → Predax tab
- Shopify: Shopify Admin → Apps → Predax → Settings
See the integration pages for detailed setup instructions.