System · Firewall
Keep spam and fraud
outside the door
For e-shops and companies that get fake orders, spam form submissions or suspicious logins. The firewall rejects them before they are created, and you see every rejected attempt with its reason and location.
- Blocks Tor on login, sign-up, orders and forms
- Your own list of blocked IP addresses, IPv6 included
- Rejects risky logins even with the right password
No credit card. Up and running in 5 minutes.
- At the entranceChecks run on login, sign-up, orders and the contact form.
- IPv4 and IPv6Blocked addresses with geolocation, hostname and an internal reason.
- Risk scoreEvery login gets a 0–100 score based on location, network and history.
- No setupTor protection works from the moment your organisation exists.
Why a firewall
A fake order costs more than time
Spam orders lock up stock, fake sign-ups clutter your CRM and password attacks put the whole team at risk. Deleting them by hand fixes nothing.
Today
- You delete fake orders by hand while the stock sits reserved
- Your form fills up with spam from anonymising networks
- You block a problem customer, and they keep ordering
- You never hear about an attempt to break a password
With BizKitHub
- An order from Tor or a blocked IP is never created
- The contact form rejects submissions from Tor
- A banned customer cannot place a new order
- A suspicious login is rejected and the account owner gets an e-mail
Rejected attempts
Every rejection with a reason and location
The firewall logs rejected requests separately from ordinary system errors. Each shows its type, endpoint, country and city. The detail adds the reason, what the attacker filled in, and the technical context.
- Categories: network, identity, rate limit, content, fraud
- Filter by category and rejection type
- Top ten countries the attempts come from
- Rejected attempts also appear in the daily operations digest
| Attempt | Location | |
|---|---|---|
| Order · today 09:14 | Frankfurt, DE | Tor |
| Login · today 03:52 | Amsterdam, NL | Tor |
| Form · yesterday 22:08 | Bucharest, RO | Tor |
| Order · yesterday 17:31 | Brno, CZ | Blocked IP |
Blocked IP addresses
One address, one click, no more orders
Add an address that sends spam or login attempts to your block list. Visitors from it cannot place an order, log in or sign up. The reason stays internal and the visitor never sees it.
- IPv4 and IPv6 addresses
- Geolocation, country and reverse DNS for each address
- An internal note on why the address was blocked
- Adding and removing a block is recorded in the audit trail
Risky logins
The right password is not enough when the login makes no sense
Every login attempt gets a risk score from 0 to 100. It weighs a new IP address, an unusual country, a burst of attempts and signals such as Tor, proxies or hosting networks. A high score rejects the login and the account owner gets an e-mail.
- Attempt history with location, provider and network (ASN)
- Risk signals: Tor, proxy, hosting, mobile network
- IP reputation from public blocklists, refreshed daily
- App-based two-factor authentication for every team member
- Prague, CZO2 Czech Republic · today 08:12score 4Success
- Brno, CZVodafone · mobile network · yesterday 18:40score 22Success
- Unknown city, NLTor exit node · yesterday 02:15score 95Blocked
What it does
Protection that works through the night
Tor blocking
Login, sign-up, orders and the contact form.
Blocked IP addresses
Your own IPv4 and IPv6 list with reasons and geolocation.
Banned customers
A banned customer cannot order, not even with an e-mail alias.
Rejection overview
Counts for 24 hours, 7 and 30 days, by type and by country.
Attempt detail
Reason, endpoint, location, attacker data and technical context.
Login risk score
Suspicious logins are rejected and the account owner is e-mailed.
IP reputation
Public lists of attacking addresses are downloaded every day.
Contact trust
How risky the IP addresses a customer logged in from are.
Daily digest
Rejected attempts in the operations summary sent by e-mail.
Getting started
Protection starts right after sign-up
- 01
Create an account
Sign-up is free and needs no credit card.
- 02
Connect your website or e-shop
Orders and forms sent over the API are checked automatically.
- 03
Add your own blocks
Block problem IP addresses and customers with one click.
Who it is for
Who the firewall saves the most trouble
E-shops
No fake orders tying up stock and fulfilment.
Bookings and services
Forms and sign-ups without spam from anonymous networks.
Companies with bigger teams
A login from a suspicious network is rejected even if the attacker has the password.
Connected modules
Runs on the same data as the rest of your company
Security
EU hosting, permissions, audit and firewall.
Activity & audit
Who changed what, and when. A full audit trail.
Orders
The whole order lifecycle, from cart to payment and dispatch.
Forms
Custom questions whose answers are saved with the order.
Team & permissions
Roles, per-module permissions and team invites.
Contacts & CRM
Customers, companies and the full relationship on one card.
Frequently asked questions
Common questions about the firewall
Do I have to configure the firewall?
No. Tor blocking and login risk scoring work automatically. Add your own blocked IP addresses whenever you need to.
What does a blocked visitor see?
They get an error response and the order, sign-up or login does not go through. They never see your internal reason.
What if I block an address by mistake?
Remove the block in your organisation settings with one click. Both adding and removing are recorded in the audit trail.
Does it protect orders from my own website too?
Yes. Orders and contact forms sent over the API pass the same checks as those created in the admin.
Keep spam and fraud outside
Create a free account. Tor protection is active from your first order.