---
title: Free vs Pro Features
description: "TrustLens has a clear split between Free and Pro: **Free surfaces the risk, Pro acts on it.** The free version on WordPress.org is the complete plugin — no trial limits, no disabled scoring, no locked detection modules. Every customer gets…"
url: "https://webstepper.io/docs/trustlens/getting-started/free-vs-pro-features/"
updated: "2026-10-18"
category: Getting Started
---

# Free vs Pro Features

TrustLens has a clear split between Free and Pro: **Free surfaces the risk, Pro acts on it.** The free version on WordPress.org is the complete plugin — no trial limits, no disabled scoring, no locked detection modules. Every customer gets a trust score, every detection module runs, and every abuse pattern is visible. Pro adds the tools to act on what you see: an automation engine, the dedicated Chargeback Monitor page, advanced Card-Testing Defense, payment-method controls, scheduled reports, and ten additional notification types.

This guide walks through what's in each tier, who Pro is for, and how to decide whether to upgrade.

---

## The Philosophy

The split is intentional. Many fraud and security plugins lock the actual *detection* behind a paywall, so the free version can't tell you whether you have a problem. TrustLens does the opposite: detection and scoring are complete in Free, so you can see exactly how much abuse your store has. Pro is what you upgrade to once you've decided you want to *act* on what's there — automatically, at scale, or with the deeper card-network reporting that processors care about.

That means: if you have a small store and a manual moderation workflow, Free is genuinely sufficient. If you have meaningful order volume, frequent chargebacks, or you're losing time clicking "block" on individual customers, Pro pays for itself quickly.

---

## What's in Free

### Detection — All 8 Modules

Every detection module ships in Free. None are gated.

- **Return Abuse Detection** — return rate against your store baseline, refund value, delivered full refunds and other return patterns, confidence-weighted
- **Order Pattern Analysis** — completed orders, order value, cancellation patterns
- **Coupon Abuse Detection** — first-order coupons, coupon-then-refund cycles, coupon usage rate
- **Category-Aware Risk Scoring** — category and product context that raises or lowers the return-abuse penalty
- **Linked Accounts Detection** — accounts sharing addresses, phone numbers, or payment methods (a shared IP or device alone never links accounts)
- **Shipping Address Anomalies** — address hopping, country mismatches, change velocity
- **Chargeback Tracking** — Stripe/WooPayments auto-ingestion, manual entry for other gateways (with response due date and won/lost outcome), automatic card-brand capture
- **Card-Testing Defense** — real-time decline-velocity monitoring, escalating device lockouts, VIP bypass, Panic Freeze, optional Cloudflare Turnstile browser challenge

### Trust Scoring Engine

- 0–100 score per customer, recalculated automatically on behavior changes
- Six segments (VIP, Trusted, Normal, Caution, Risk, Critical)
- Every signal visible on the customer profile
- Account-age loyalty bonus up to +15 points
- Configurable Full-confidence Order Threshold, return-risk thresholds, category risk weights, and checkout-blocking master toggle

### Dashboard

- Trust Index (average trust score) with 30-day trend
- Customer segment distribution
- Live telemetry and Card-Testing Defense panels
- Detection Modules status panel
- Chargeback-ratio alert when your monthly ratio crosses a Visa, Mastercard, Amex, or Discover line (alert band + header status)
- Priority Targets high-risk customer list
- Refund activity chart
- Live activity feed

### Customer Management

- Searchable customer list with sort, filter, and CSV export
- Customer detail profile with full event timeline and per-signal contribution breakdown
- Block / unblock / allowlist actions
- Bulk actions (block, unblock, allowlist, remove from allowlist, add/remove tag, recalculate, delete)
- Admin notes per customer
- Trust badges on the WooCommerce orders list, sortable and filterable by segment
- Trust score display on every order edit page
- Checkout enforcement for blocked customers (Classic + Blocks / Store API)

### Notifications

- Blocked Checkout Alert
- Welcome Summary (24 hours after activation)
- Weekly Summary

### Platform Features

- REST API with 8 endpoints
- WooCommerce HPOS compatibility
- GDPR privacy export and erasure
- Historical Sync (batched, with a skip option)
- Action Scheduler-based async scoring with deduplication
- Unified Request Gate for Classic + Blocks checkout
- Keyed HMAC-SHA256 pseudonymization throughout

---

## What Pro Adds

### 1. Automation Rules Engine

The flagship Pro feature. Build trigger-based rules that fire when customer risk changes, orders are placed, refunds happen, disputes are filed, linked accounts are detected, card-testing attacks happen, or shipping anomalies are spotted.

- **16 triggers** — Score Updated, Segment Changed, Checkout Blocked, Shipping Anomaly, Order Placed, Order Completed, Refund Processed, Dispute Recorded, Chargeback Filed, Linked Accounts Detected, Card Testing Attack, Challenge Failed, Customer Blocked, Customer Unblocked, Customer Allowlisted, and Customer Allowlist Removed
- **30+ condition fields** — trust score, segment, total order value, total disputes, customer age in days, country mismatch, coupon total, payment method, linked accounts count, return rate, refund value, refund amount and reason, etc.
- **Actions** — block customer, hold order, send email, fire webhook, allowlist customer, cancel order, require verification, add or remove a tag, add a note, flag for review (on an order still awaiting payment, such as at Order Placed, hold, cancel and require verification wait until the payment goes through)
- **Async dispatch with automatic retry** — failed actions retry at 60s / 120s / 240s backoff
- **HMAC-SHA256 signed webhooks** by default
- **Save-time validator** blocks rules that can never fire — unsatisfiable conditions, schema violations, contradictions — each with a specific inline reason
- **Inline rule inspector** shows SKIP status with the exact reason ("Cooldown active" / "Condition not met: trust_score > 50") so you can answer "why didn't my rule fire?" in one glance

### 2. Advanced Chargeback Monitor

A dedicated **TrustLens → Chargeback Monitor** page built to keep you clear of card-network monitoring programs.

- **Per-network ratio breakdown** — Visa VAMP, Mastercard ECP, Amex, Discover — with threshold progress bars (Visa's figure is a floor, because VAMP also counts fraud reports that never reach WooCommerce)
- **12-month trend chart** of your blended ratio
- **Trailing-30-day window** alongside the calendar month
- **Open disputes worklist** with response deadlines, plus a Dashboard alert when responses are due within 72 hours
- **Recent disputes activity feed** with case status
- **Top-disputed customers** with one-click access to a **Dispute Evidence Report** — print-ready professional behavioral risk report (trust score, signals, matched prior orders with a Visa Compelling Evidence 3.0 check, order history, return analysis vs store average, linked accounts, full event timeline, and a verification fingerprint/QR code) that you can submit alongside processor dispute responses
- **Customizable warn-threshold percent** (50–100%)
- **Auto-Block After N Lost Disputes** — configurable runtime enforcement (off by default)
- **Chargeback Ratio Email Alerts** — daily check that emails you before any brand crosses its network threshold, deduplicated per brand per calendar month

### 3. Card-Testing Defense Pro

On top of the Free Card-Testing Defense, Pro adds attack-scale protection.

- **Auto-escalation** from targeted blocking to global Panic Freeze when an attack spreads across multiple device fingerprints (default: 3 distinct devices in 10 minutes)
- **Geographic-diversity safeguard** — before escalating, checks whether the decline burst is naturally distributed across 3 or more countries with no single country above 50%, so legitimate flash-sale or viral traffic isn't mistaken for an attack
- **Fingerprint and IP CIDR allowlists** for QA, integration partners, and known-good traffic (IPv4 and IPv6 ranges supported)
- **Advanced fingerprint signal** — 12-font detection via baseline-width comparison, harder for botnets to spoof consistently across nodes
- **24-hour attack intelligence** with decline-code breakdown, top-10 attacking fingerprints, an hourly timeline chart, and CSV export of velocity events
- **Slack and email alert dispatcher** for `attack_detected`, `auto_escalated`, and `panic_activated` events

### 4. Payment Method Risk Controls

Hide specific payment gateways for high-risk customers, linked accounts, or velocity spikes. Fine-grained checkout protection without blocking the whole order.

### 5. Scheduled Reports

Daily, weekly, or monthly email summaries of store risk activity, customer trends, and protection KPIs. Configurable recipients and schedule (time of day, and the weekday for weekly reports).

### 6. Ten Advanced Notification Types

- High-Risk Order Alert
- Segment Change Alert
- Daily Digest
- High-Value Order Alert
- Repeat Refunder Alert
- Velocity Alert
- Score Recovery Alert
- New Customer Risk Alert
- Monthly Revenue Protection Report
- Chargeback Filed Alert

### 7. Advanced Address Analysis

Diversity-trend detection and a multi-country reshipping rule (several shipping countries with one billing country) for deeper shipping-fraud insight on top of the Free shipping-anomalies module.

### 8. Refund Defense

Case management for risky refunds: require manager approval, returned-goods receipt, warehouse inspection and evidence before WooCommerce issues the money, with a Refund Cases inbox, SLA controls and an audit trail.

### 9. Store Trust Network

For merchants with two or more stores on a multi-site license: share hashed customer risk flags between the stores you own, so a repeat offender is recognized on their first order at your other store. See [Store Trust Network](/docs/trustlens/detection-modules/store-trust-network/).

---

## Side-by-Side Feature Matrix

| Feature | Free | Pro |
| --- | --- | --- |
| **Detection** |  |  |
| All 8 detection modules | ✓ | ✓ |
| Trust scoring (0–100, 6 segments) | ✓ | ✓ |
| Per-signal visibility on customer profile | ✓ | ✓ |
| Advanced address-diversity analysis | — | ✓ |
| Store Trust Network (multi-site license) | — | ✓ |
| **Card-Testing Defense** |  |  |
| Real-time velocity detection | ✓ | ✓ |
| Panic Freeze button | ✓ | ✓ |
| VIP customer bypass | ✓ | ✓ |
| Browser challenge (Cloudflare Turnstile) | ✓ | ✓ |
| Auto-escalation | — | ✓ |
| Geographic-diversity safeguard | — | ✓ |
| Fingerprint / IP CIDR allowlists | — | ✓ |
| 12-font advanced fingerprint | — | ✓ |
| 24-hour attack intelligence + CSV export | — | ✓ |
| Slack + email attack alerts | — | ✓ |
| **Chargeback Monitor** |  |  |
| Chargeback-ratio alert when a network line is crossed | ✓ | ✓ |
| Stripe / WooPayments auto-ingestion | ✓ | ✓ |
| Manual dispute entry (with won/lost outcome) | ✓ | ✓ |
| Dedicated Chargeback Monitor page | — | ✓ |
| Per-network Visa VAMP/MC/Amex/Discover breakdown | — | ✓ |
| Open-disputes deadline worklist | — | ✓ |
| 12-month trend chart | — | ✓ |
| Trailing-30-day window | — | ✓ |
| Recent disputes activity feed | — | ✓ |
| Dispute Evidence Report (print-ready) | — | ✓ |
| Auto-block after N lost disputes | — | ✓ |
| Daily ratio email alerts | — | ✓ |
| **Customer Management** |  |  |
| Trust badges on orders list | ✓ | ✓ |
| Customer detail profile | ✓ | ✓ |
| Block / Allowlist / Bulk actions | ✓ | ✓ |
| Checkout enforcement (Classic + Blocks) | ✓ | ✓ |
| Order-edit-screen trust display | ✓ | ✓ |
| Refund Defense case management | — | ✓ |
| **Automation** |  |  |
| Automation rules engine | — | ✓ |
| 16 triggers, 30+ condition fields | — | ✓ |
| HMAC-SHA256 signed webhooks | — | ✓ |
| Async dispatch with retries | — | ✓ |
| Save-time validator + rule inspector | — | ✓ |
| **Notifications & Reports** |  |  |
| Core email notifications | ✓ | ✓ |
| 10 advanced notification types | — | ✓ |
| Scheduled reports (daily / weekly / monthly) | — | ✓ |
| Payment Method Risk Controls | — | ✓ |
| **Platform** |  |  |
| REST API (8 endpoints) | ✓ | ✓ |
| WooCommerce HPOS compatible | ✓ | ✓ |
| GDPR privacy tools | ✓ | ✓ |
| Historical Sync | ✓ | ✓ |
| Priority support | — | ✓ |

---

## Who Should Upgrade to Pro?

| Store Profile | Recommendation |
| --- | --- |
| Small store, low order volume (< 100 orders/month), manual moderation | Free is sufficient |
| Mid-volume store with occasional chargebacks (1–3 per month) | Free covers detection; consider Pro if you want auto-actions |
| Mid-to-high volume with regular chargeback exposure | Pro — Chargeback Monitor pays for itself by keeping you below network thresholds |
| Stores targeted by card-testing attacks | Pro — auto-escalation, geo-diversity safeguard, and allowlists are critical |
| Stores with operational team needing alerts & reports | Pro — scheduled reports + 10 notification types |
| Stores building custom integrations (CRM, ERP, helpdesk) | Pro — automation webhooks + HMAC signatures + retry logic |
| Agencies managing client stores | Pro — automation + reports + priority support |

---

## How to Upgrade

1. Click **Upgrade** in the TrustLens admin header, or visit the Pricing page from your admin
2. Select your license plan
3. Complete the purchase via Freemius checkout
4. Your license activates automatically — Pro features unlock immediately, no reinstall needed

Pro is licensed annually. New customers are eligible for a free trial — start it from the Pricing page in your admin.

---

## What Stays the Same When You Upgrade

Upgrading is non-destructive. All customer trust scores, signal history, settings, blocks, allowlists, admin notes, and chargeback records remain exactly as they were. Pro features layer on top — you don't reconfigure anything. If you ever downgrade, you keep all the data you accumulated; you just lose access to Pro-only pages and features.