Introducing the Lightningbyrd Plugin Suite for WooCommerce

Today Lightningbyrd becomes a plugin company. We're shipping four WooCommerce plugins at once, a monitoring tool, two abuse defenses, and a database janitor, and every one of them exists because we needed it first on stores we operate.

It started with a card-testing attack

A while back, one of the production WooCommerce stores we run got hit by a card-testing operation: one datacenter IP, dozens of small orders, every one of them burning gateway fees and merchant-account reputation. The fraud dashboard offered us forty risk scores to interpret. What we actually needed was a ban button on the order screen, so we built one.

That tool ended the incident, kept running as the store's night watchman, and eventually grew into IP Shield. Productizing it taught us something: the most expensive WooCommerce problems aren't the loud crashes. They're the quiet failures, the checkout that returns 200 with an empty form, the coupon code leaking to an aggregator, the database gaining a gigabyte a month. Nothing pages you. You find out from an angry email, or a bank statement.

Four plugins, one enemy

• Pulse ($59/yr), knows the minute your store stops selling. Eight checks from inside WordPress: order-flow gaps against your own 28-day baseline, a checkout probe that catches the classic 200-but-empty-form failure, gateway and cron watchdogs, mail-failure alerts.
• IP Shield ($49/yr), the card-testing response tool. One-click bans from the order screen, an automatic velocity rule for 3 a.m., and a full audit trail, enforced inside WooCommerce on any hosting, or at the host firewall via fail2ban.
• Coupon Fence ($49/yr), a firewall for coupon redemption. Rate-limits brute-forcing, catches try-every-code auto-apply behavior, guards first-order codes against throwaway inboxes, and makes influencer codes leak-proof with signed share-links.
• Featherweight (free), the WooCommerce-aware database janitor. Scans and safely cleans what generic optimizers miss: Action Scheduler bloat (including failed jobs core keeps forever), expired sessions, autoload weight. Free forever, no email wall.

Safe by default is the whole philosophy

Every plugin in the suite activates in a mode that records what it would do and does nothing else. Pulse starts in observe mode. IP Shield and Featherweight start in dry-run. Coupon Fence starts log-only. You watch a week of receipts against your real traffic, then arm it yourself.

“A protection tool that guesses wrong on day one costs you real orders. Ours earn trust with receipts before they're allowed to act.”

The same honesty runs through the marketing: no fabricated reviews, no invented install counts, no named-competitor trash talk, and a 60-day no-quibble money-back guarantee on every purchase, because a guarantee is the one trust signal a brand-new shop fully controls.

What's next

Wave two takes the same DNA to general WordPress: Crawl Fence (see and control the AI crawlers eating your bandwidth), Tick (a wp-cron watchdog that alerts when scheduled jobs go quiet), and Hush (an admin-notice quarantine that refuses, on principle, to show ads of its own). The roadmap is public, and your vote genuinely shapes the order.