RealNode Anti-Scalper
·
Hardware-backed bot protection and fraud prevention for WooCommerce. Stops automated scalper bots at checkout using FIDO2/WebAuthn cryptographic attes …
RealNode Anti-Scalper protects WooCommerce stores against automated purchasing bots and inventory hoarding. It integrates hardware-level identity verification directly into the checkout flow.
When a customer clicks ”Place Order”, RealNode requests a cryptographic proof from their device (TouchID, FaceID, or Windows Hello). This proof is generated inside the device’s secure enclave and validated server-side before the order is processed.
Three service tiers
- RN Insight — Passive monitoring. Collects device signals without interrupting checkout.
- RN Sentinel — Active protection. Biometric verification is required at checkout for every order.
- RN Vault — Event-level control. Enforces per-user purchase quotas for high-demand ticket releases.
Key properties
- No personal data collected — only anonymous hardware identifiers (IDH) are transmitted
- No friction for real users — verification completes in under 1 second using native device biometrics
- No performance impact — the SDK loads asynchronously and does not affect page speed
- No server maintenance — fully managed SaaS infrastructure
- Fail-open by design — if the RealNode service is unreachable, checkout proceeds normally
Requirements
- An active RealNode account at realnode.emkaylabs.tech
- WooCommerce 6.0 or later
- Modern browsers with WebAuthn support (Chrome 67+, Firefox 60+, Safari 14+)
External services
This plugin communicates with the RealNode API to provide hardware-backed bot protection. Two endpoints are used:
- RealNode SDK (api.emkaylabs.tech): The plugin loads the RealNode JavaScript SDK on checkout pages to trigger the WebAuthn/FIDO2 verification prompt. Only anonymous hardware hashes (IDH) are transmitted — no personal data.
- RealNode Backend API (rn-v3-elite.onrender.com): The plugin makes a server-to-server call to validate the cryptographic token generated during checkout and enforce purchase quotas. Data sent includes the ticket quantity and the anonymous hardware hash (IDH).
This service is operated by EMKAY LABS.
- Service page and legal information: https://realnode.emkaylabs.tech