Suma Security
WordPress and WooCommerce checkout hardening plugin focused on fingerprint-driven velocity controls, OTP verification, and lock management.
Overview
Suma Security adds layered fraud and abuse controls to WooCommerce checkout with persistent fingerprint state, session-level lockouts, device-token validation, and email OTP verification after repeated failed payment attempts.
Version: 1.1.42
Requires at least: WordPress 6.9
Requires PHP: 7.4+
Text domain: suma-security
Core Capabilities
- Browser and checkout fingerprint collection
- Velocity scoring across identity, session, device, and network signals
- Session lockouts for repeated checkout abuse
- Device-token cookie issuance and validation
- OTP verification after configurable failed payment threshold
- Admin tools to inspect fingerprint state and manually unlock
- CheckoutWC compatibility hooks and scripts
Primary Runtime Areas
- Bootstrap and lifecycle (
suma-security.php,class-plugin.php,class-lifecycle.php) - Orchestrator and constants (
includes/modules/woocommerce-security.php) - Shared helpers (
shared.php) - Session lock controls (
session.php) - Fingerprint and velocity state (
fingerprint.php) - OTP verification and failed-payment tracking (
verification.php) - Checkout gate enforcement (
checkout-gates.php) - Checkout UI and AJAX scripts (
verification-ui.php, JS dist/src) - Admin settings and tools UI (
admin-pages.php)
Admin Locations
- Settings -> Suma Security
- Tools -> Checkout Fingerprints