Protect Your Store from Scrapers

If competitors or third parties are copying your product images, descriptions, or pricing data, this guide covers how to set up Kedra Shield to make scraping significantly harder.

Step 1: Enable Content Protection

Content protection is the first line of defense against manual and semi-automated scraping.

  1. Go to Content Protection from your dashboard.
  2. Enable all of the following:
FeatureWhy
Protect imagesPrevents drag-and-drop saving and disables image selection.
Protect text contentPrevents text highlighting and selection.
Disable right-clickRemoves the context menu (Save Image As, Copy, View Source).
Disable copyBlocks Ctrl+C / Cmd+C and cut operations.
Disable keyboard shortcutsBlocks Ctrl+U (View Source), Ctrl+S (Save Page), F12, and other shortcuts.
Block developer toolsDetects when browser developer tools are opened and clears the page.
Blur on tab switchBlurs your store when the visitor switches tabs, making screenshot-based scraping harder.

Note: Content protection runs in Phase 2 of the security flow. If a visitor’s IP is whitelisted in the IP Blocker, content protection will not apply to them.

Step 2: Enable Bot Blocking

Automated scrapers are bots. Enable bot detection to block them.

  1. Go to VPN & Bot Blocker from your dashboard.
  2. Enable Bot Protection.
  3. Enable VPN & Proxy Blocking — many scrapers run behind VPNs or from cloud servers.
  4. Consider enabling “Enable strict blocking” if you are under active scraping attacks.
  5. Click Save.

Step 3: Block Cloud Providers (Pro)

Most automated scrapers run from cloud hosting services. Blocking their ASNs stops traffic from these networks entirely.

  1. Go to ASN Blocker from your dashboard.
  2. Add ASN blocks for common scraping sources:
    • AS16509 — Amazon Web Services
    • AS15169 — Google Cloud
    • AS14061 — DigitalOcean

Caution: Blocking major cloud providers may also block some legitimate services. Test carefully after adding ASN blocks.

Step 4: Block Suspicious Referrers (Pro)

If you see scraping traffic coming from specific domains in your analytics:

  1. Go to Referrer Blocker from your dashboard.
  2. Click Add Referrer Block.
  3. Enter the domain and select the Contains match type to catch subdomains as well.
  4. Click Save.

Limitations

Content protection operates at the browser level. It is effective against casual copying and semi-automated tools, but cannot fully prevent determined scraping by headless browsers or server-side crawlers that do not execute JavaScript. Combining content protection with bot blocking and ASN blocking provides the strongest defense available within a Shopify app.

FeatureSetting
All content protection togglesEnabled
Bot ProtectionEnabled (strict mode if under attack)
VPN & Proxy BlockingEnabled
ASN BlockerBlock major cloud providers (Pro)
Referrer BlockerBlock known scraper domains (Pro)

Next Steps