There seems to be no ability to utilise tools such as mCaptcha in the app, nor do apps like Negate or Blockify work. Does anyone have a solution to prevent bots from attacking the on-site search field in the Search & Discovery app? Our results are full of spam searches and seemingly the Shopify environment isn’t blocking them. Thanks
hey. if the negate and blocky is not useful than you can use Hidden google recaptcha but you have to integrate it by customized your backend using their code.
thanks…no idea how to do this…but I will look into
Preventing bot attacks on your Shopify store’s search field can be challenging, but there are a few potential solutions you can explore:
Solutions to Prevent Bot Attacks
Negate Bot Protection: This app blocks malicious bots from firing marketing pixels, reducing ad fraud and false analytics. It offers a free trial and various pricing plans, starting at $19/month. Negate uses advanced AI to detect and block bots, and allows for custom protection thresholds and rules.
Boost AI Search & Filter: This app provides AI-powered search results, custom product filters, and robust product discovery tools. It offers a free plan and trial, with features like typo tolerance, synonym groups, and product recommendations. Boost AI Search & Filter can help reduce irrelevant searches and improve conversion rates.
Shopify Search & Discovery App: While this app doesn’t have built-in CAPTCHA functionality, you can explore its features like semantic search and synonym groups to improve search accuracy and reduce spam searches
Additional Tips
Keep an eye on your store’s analytics to identify suspicious traffic patterns.
Reach out to Shopify support or the app developers for further assistance and guidance.
If you’re experiencing persistent issues, you might want to consider upgrading to Shopify Plus, which offers more advanced bot protection features.
Keep in mind that while these solutions can help mitigate bot attacks, they might not completely eliminate the issue. Regularly reviewing and adjusting your strategies can help optimize your store’s performance..
thanks. This doesn’t address the issue. I tried Negate, see original post, and it doesn’t cater for Search & Discovery.
What exactly is the issues,then can you break it down
Preventing bot attacks on the Search & Discovery app can be challenging. Since Negate and similar apps don’t seem to work for this specific use case, here are a few potential alternatives:
While Shopify has robust security measures, you might want to reach out to their support team to see if there are any specific settings or features that can help mitigate bot attacks on the Search & Discovery app.
Developing a custom solution using Shopify’s API might be an option. This could involve creating a script that monitors search queries and blocks suspicious activity.
Exploring alternative search apps on the Shopify App Store that have built-in bot protection or CAPTCHA functionality might be worth considering.
Additional Ideas of mine
Implementing rate limiting on search queries could help reduce the impact of bot attacks.
Analyzing search query patterns to identify and block suspicious activity might be a viable approach.
If you’re still struggling to find a solution after this solution given to you. you can consider reaching out to Shopify’s support team
100s of bot/spam searches through the Search & Discovery app each day.
We’re on Shopify Plus.
Shopify Support unable to help. Asked numerous times.
Negate and Blockify unable to resolve (I have tried both).
No ability to use e.g. recaptcha or mCaptcha in Search & Discovery.
since traditional methods like Negate and Blockify aren’t effective in this case. Given your Shopify Plus status and the app’s limitations, here are potential Alternative Search Apps like :
Fast Simon
Searchanise
Prefixbox AI Search with built-in bot protection.
Fast Simon–Offers advanced search functionality for large e-commerce retailers, leveraging shopper behavior and store inventory to enhance the online shopping experience.
Searchanise—Provides site search, filtering, merchandising, upsell, and cross-sell features, with personalization algorithms for automated assistance.
Prefixbox AI Search—Utilizes vector search and machine learning to return relevant results, offering customizable plans and detailed analytics.
Custom Solution
Develop a script using Shopify’s API to monitor search queries and block suspicious activity. This might involve:
Limit the number of search queries allowed within a certain time frame to reduce bot activity.
Analyze search patterns to identify and block suspicious queries.
By exploring these alternatives and ideas, you may find a solution to mitigate bot attacks on your Search & Discovery app and improve overall performance
If you still don’t understand then let collaborate
I will love to try my best to to help you find a tailored solution to mitigate bot attacks and optimize your Search & Discovery app. Let’s discuss further and create a plan to enhance your store’s performance.
The core issue here is that Search & Discovery’s search queries run through Shopify’s own infrastructure, so apps like Blockify and Negate can’t intercept them - they don’t have a hook into that layer. It’s not a flaw in those apps, it’s just an architectural gap that Shopify hasn’t addressed.
The most practical option at your level is Cloudflare. Since you’re on Shopify Plus and presumably have some control over your DNS, you can route traffic through Cloudflare and use their Bot Fight Mode or WAF rules to rate-limit or block suspicious search requests before they hit Shopify at all. Setting up rate limiting on the /search endpoint specifically can cut down the volume significantly. It’s not a perfect solution but it operates at the network level, which is the only place you realistically can block this.
If Cloudflare isn’t an option, switching search apps is probably the most reliable path. Fast Simon and Prefixbox do handle bot mitigation differently since they own more of the request pipeline than Shopify’s native app does. The downside is migration effort and cost.
One thing worth clarifying - is this mainly an analytics pollution problem, or are the bots causing actual performance/resource issues? If it’s primarily analytics noise, filtering bot traffic at the reporting layer (GA4 has audience exclusions, for example) won’t stop the requests but at least keeps your data clean while you work on a longer-term fix.
Shopify’s position on this is frustrating and it’s a known gap. You’re not going to get a clean native fix any time soon based on how this has been handled across similar threads.
The annoying part with this kind of traffic is that after a while you stop trusting the search data entirely.
Suddenly you’re looking at weird search terms, strange spikes, inflated activity, and it becomes hard to tell what’s coming from actual customers anymore.
At that point the issue starts affecting decisions too, not just performance.