ClickHelm
clickhelm.com
What it is
ClickHelm is click-fraud protection that identifies devices and can block people rather than relying on IP addresses. It evaluates device characteristics, network type, click identifiers, and on-site behavior to produce a named risk score. Blocking is not automatic unless a customer creates a rule to enable it. The free edition records and scores visitors, identifies VPNs and crawlers, and counts calls, WhatsApp messages, forms, and orders, but does not block visitors. Paid plans add blocking and may include Google Ads reporting, rules, alerts, or client reporting. Detection and blocking cover traffic from Google Ads, Meta, Microsoft Ads, TikTok, organic search, and direct visits, while campaign spend matching is specific to Google Ads. ClickHelm runs as a web service or can be self-hosted on WordPress 5.6 or newer, PHP 7.2 or newer, and MySQL or MariaDB. Visitor data remains in the customer's WordPress database, though visitor addresses may be sent for VPN, proxy, Tor, or data-centre classification. ClickHelm starts recording after installation and does not import historical traffic. Paid plans start at $29 a month.
Spec sheet
- What it does
- ClickHelm is a WordPress click-fraud protection plugin that scores visitors and lets customers block suspicious devices.Read 14 Oct 2026 · clickhelm.com
- Purpose
- ClickHelm is click-fraud protection that identifies devices and blocks the person rather than the IP address.Read 1 Oct 2026 · clickhelm.com
- Support
- The contact page says support normally replies within one working day and provides separate help, billing, privacy, complaints and feedback addresses.Read 14 Oct 2026 · clickhelm.com
- Behavior signals
- It records time on page, scrolling, interactions, forms, calls, WhatsApp taps and WooCommerce orders as behavioral evidence.Read 14 Oct 2026 · clickhelm.com
- Blocking control
- Nothing is blocked automatically unless the customer writes a rule enabling automatic blocking.Read 1 Oct 2026 · clickhelm.com
- Changelog change
- Version 6.93.0 removed an automatic-blocking control from the edition that contains no blocking capability.Read 14 Oct 2026 · bo.wordpress.org
- Click reconciliation
- Google Ads click identifiers are matched with clicks Google charged to distinguish arrived, missing and fabricated clicks.Read 14 Oct 2026 · clickhelm.com
- Compliance statement
- The maker says its Google API data handling follows Google API Services User Data Policy and Limited Use requirements.Read 14 Oct 2026 · clickhelm.com
- Crawler checks
- It compares claimed crawler identities with network ownership to identify impostor crawlers.Read 14 Oct 2026 · clickhelm.com
- Data location
- Visitor records remain in tables in the customer’s own WordPress database rather than being proxied through ClickHelm.Read 14 Oct 2026 · clickhelm.com
- Data storage
- Visitor data is stored in the customer's WordPress database and is not copied to ClickHelm.Read 1 Oct 2026 · clickhelm.com
- Deployment model
- Installation is a WordPress plugin uploaded to the customer’s own hosting, with database tables created on activation.Read 14 Oct 2026 · clickhelm.com
- Detection
- It measures device characteristics, network type, click identifiers and on-site behavior to produce a named risk score.Read 1 Oct 2026 · clickhelm.com
- Developer API and SDKs
- The cited documentation describes Google Ads API use but does not publish a ClickHelm REST API, SDK or developer portal.Read 14 Oct 2026 · clickhelm.com
- Device fingerprinting
- It identifies returning devices across browser changes, cleared storage and network changes instead of relying only on IP addresses.Read 14 Oct 2026 · clickhelm.com
- Documentation
- The help material covers installation, tracking-template setup, missing data, risk scores and blocking behavior.Read 14 Oct 2026 · clickhelm.com
- False-positive handling
- Possible device matches can be rejected manually, which immediately lifts a carried-over block.Read 14 Oct 2026 · clickhelm.com
- Free edition
- The free edition records and scores visitors, identifies VPNs and crawlers, and counts calls, WhatsApp messages, forms and orders, but never blocks anyone.Read 1 Oct 2026 · clickhelm.com
- Free-edition limitation
- The WordPress listing says the free edition records and explains traffic but does not block visitors; blocking and rules are in a separate paid edition.Read 14 Oct 2026 · wordpress.com
- Google Ads integration
- The Google Ads connection reads click reports, campaign names, ad-group names, keyword names and cost figures once daily.Read 14 Oct 2026 · clickhelm.com
- Google Ads write scope
- When enabled, ClickHelm can add its tracking template and maintain an account-level IP exclusion list, but it does not change campaigns, ads, budgets or bids.Read 14 Oct 2026 · clickhelm.com
- Google data security
- Google access tokens are encrypted with AES-256-GCM during the server exchange and requests use TLS.Read 14 Oct 2026 · clickhelm.com
- History limitation
- ClickHelm starts recording when installed and does not import historical traffic or backfill earlier data.Read 1 Oct 2026 · clickhelm.com
- Independent directory status
- WP PlugIndex lists version 6.92.0, active status, testing through WordPress 7.1 and no WordPress.org ratings.Read 14 Oct 2026 · wpplugindex.com
- Independent installation count
- The WordPress developer profile lists fewer than 10 active installations.Read 14 Oct 2026 · profiles.wordpress.org
- Independent rating
- Rating on WordPress.org: 0 out of 5 from 0 reviews.Read 14 Oct 2026 · bo.wordpress.org
- Independent version status
- The WordPress developer profile records version 6.93.0 committed on October 9, 2026.Read 14 Oct 2026 · profiles.wordpress.org
- Limit: charged-click timing
- It cannot stop the initial Google charge because charging occurs before the visitor reaches the customer site.Read 14 Oct 2026 · clickhelm.com
- Limit: no guaranteed refunds
- It prepares evidence for Google’s Click Quality form but says Google alone decides whether a refund is granted.Read 14 Oct 2026 · clickhelm.com
- Limit: no historical backfill
- ClickHelm starts recording at installation and cannot import or reconstruct earlier traffic.Read 14 Oct 2026 · clickhelm.com
- Limit: overage behavior
- When a traffic allowance is exceeded, existing blocks remain but new blocking and reporting pause until upgrade or reset.Read 14 Oct 2026 · clickhelm.com
- Limit: uncertainty
- The maker says scores indicate evidence and priority rather than proving fraudulent intent with certainty.Read 14 Oct 2026 · clickhelm.com
- Maker founding year
- No founding year is stated on the cited company pages.Read 14 Oct 2026 · clickhelm.com
- Maker headquarters
- No headquarters address is stated on the cited company pages.Read 14 Oct 2026 · clickhelm.com
- Maker identity
- The legal terms identify Hany Mahfouz trading as ClickHelm.Read 14 Oct 2026 · clickhelm.com
- Network detection
- It classifies datacenter, VPN, proxy and Tor traffic through an address-classification service.Read 14 Oct 2026 · clickhelm.com
- Network lookup
- Visitor addresses may be sent to ClickHelm for VPN, proxy, Tor or data-centre classification through proxycheck.io, and ClickHelm stores only classification counts.Read 1 Oct 2026 · clickhelm.com
- Open-source status
- The WordPress directory labels ClickHelm open-source software; the cited listing does not state a more specific licence name.Read 14 Oct 2026 · bo.wordpress.org
- Other traffic
- Detection and blocking work for visits from Meta, Microsoft Ads, TikTok, organic search and direct traffic, while campaign spend matching is specific to Google Ads.Read 1 Oct 2026 · clickhelm.com
- Other traffic sources
- Detection and blocking work on traffic from sources including Meta and Microsoft ads, although campaign matching is Google Ads-specific.Read 14 Oct 2026 · clickhelm.com
- Outbound data
- Visitor IP addresses leave the site only when optional network classification is enabled; ClickHelm says it stores none of those addresses.Read 14 Oct 2026 · clickhelm.com
- Payment processor
- Paddle is the merchant of record and handles card details.Read 14 Oct 2026 · clickhelm.com
- Plan overage
- When a plan's visit allowance is exceeded, existing blocks remain active while blocking new visitors and reporting screens pause until an upgrade or the next month.Read 1 Oct 2026 · clickhelm.com
- Refund policy
- A first payment on a new subscription can be refunded in full if requested within seven days, without giving a reason.Read 1 Oct 2026 · clickhelm.com
- Repeat-click detection
- The product flags repeated paid clicks from one device within a customer-defined time limit.Read 14 Oct 2026 · clickhelm.com
- Risk scoring
- Each triggered check adds to a visible risk score with named reasons shown beside the visitor.Read 14 Oct 2026 · clickhelm.com
- Rules and automation
- Automatic blocking is disabled by default and only runs when the customer creates a rule enabling it.Read 14 Oct 2026 · clickhelm.com
- System requirements
- The WordPress directory lists WordPress 5.6 or newer, PHP 7.2 or newer and testing through WordPress 7.1.3.Read 14 Oct 2026 · bo.wordpress.org
- WordPress requirements
- ClickHelm requires WordPress 5.6 or newer, PHP 7.2 or newer, and MySQL or MariaDB.Read 1 Oct 2026 · clickhelm.com
Plans and prices
Strong points and limits
Strong points
- Scores device, network, click, and behavior signals
- Free edition identifies VPNs and crawlers
- Detection covers several ad and non-ad traffic sources
- Visitor data stays in the WordPress database
- New subscription's first payment has a seven-day refund window
Limits
- Free edition does not block visitors
- Blocking requires a customer-written rule
- Does not import earlier traffic
- WordPress setup requires specified software versions
Who it suits
ClickHelm suits website owners who want to score visitors and control click blocking through rules. It can also fit WordPress users who want visitor data kept in their own database, with the stated network-classification exception.
Verdict
ClickHelm provides visitor scoring and rule-controlled blocking, but the free edition is for recording and scoring rather than blocking. Consider the WordPress requirements, plan visit limits, and lack of historical import when evaluating it.
Where Specifiction places it
- Click Fraud Software#2 of 308.8