Performance, Security & Compliance
Image Optimizer (WebP/AVIF & Lazy Load)
Serves images as WebP and AVIF with a fallback, adds native lazy loading and LCP priority, and compresses originals with one-click restore.
CS-Cart & Multi-Vendor · 9 products
Faster, safer and compliant.
Cookie consent with Google Consent Mode v2, WebP images, EU Omnibus price history, two-factor login, CAPTCHA and order risk checks for CS-Cart and Multi-Vendor.
Abandoned Cart Recovery Profrom $69Price Drop & Back-in-Stock Alertsfrom $59Shipping Goal Progress Barfrom $39Product Labels & Stickers Profrom $49Urgency & Social Proof Kitfrom $49Order Source & UTM Attributionfrom $49Advanced Promotions: Buy X Get Y, Tiers, Schedulesfrom $99Referral & Affiliate Programfrom $89SEO Pro Suite: Rich Snippets, Canonical, Hreflang & llms.txtfrom $99SEO Filter Landing Pagesfrom $99404 Monitor & Redirect Managerfrom $49SEO Meta Templatesfrom $49Blog Profrom $69One Step Checkoutfrom $69Min/Max Order & Quantity Rulesfrom $39Shipping & Payment Restrictionsfrom $79Instant Live Search with Typo Tolerancefrom $99Product Videos Galleryfrom $39
All 9 add-ons in this category
Compliance features such as cookie consent and Omnibus price history help you meet common EU requirements. They do not replace legal advice for your store.
Performance, Security & Compliance
Full Page Cache Pro
Fast guest pages on normal hosting, without Varnish: private data protection, product level purges and a built-in warmer.
Performance, Security & Compliance
Cookie Consent Manager with Consent Mode v2 (GDPR)
Self-hosted GDPR cookie banner with a preference center, automatic script and video blocking, Google Consent Mode v2, Meta and TikTok consent signals and a consent log.
Performance, Security & Compliance
EU Omnibus Lowest Price (30 days)
Records every price change and shows the lowest price of the last 30 days next to price reductions (EU Omnibus Directive), with a price history chart and CSV export.
Performance, Security & Compliance
Login Security: 2FA & Passkeys
Two-step sign-in with authenticator apps and passkeys for admins, vendors and customers, plus passwordless passkey sign-in.
Performance, Security & Compliance
Captcha Pro: Turnstile & hCaptcha
Spam protection for every CS-Cart form: a built-in check with no third party, or Cloudflare Turnstile and hCaptcha, plus a honeypot, minimum fill-in time and rate limits per IP.
Performance, Security & Compliance
Order Risk Guard
Fraud score for every order with block and allow lists (e-mail, domain, phone, IP or range, address, customer): hides cash on delivery for risky customers, holds risky orders for review and asks COD buyers to confirm by link or 6-digit code.
Performance, Security & Compliance
GPSR Product Safety & EU Guarantee Labels
Helps you show GPSR product safety information (manufacturer, EU responsible person, identifiers, warnings), the official EU legal guarantee notice and GARAN producer guarantee labels.
Performance, Security & Compliance
Bot & Country Blocker
Stop AI crawlers, scrapers, scanners and unwanted countries before CS-Cart builds a page, with a one-second challenge instead of a captcha.
Shop CS-Cart on our sales site
Prices, licences, full documentation and instant downloads are on the store.
cs-cart.kaviolabs.com · 98 add-ons · 29 themes
Speeding up a CS-Cart store
Images are usually the heaviest part of a product page, so start there. Image Optimizer serves WebP and AVIF with a fallback, adds native lazy loading and LCP priority, and compresses originals with one-click restore.
Then cache. CS-Cart 4.21 has its own full page cache, which uses Varnish. Full Page Cache Pro is for normal hosting without Varnish or Redis: it stores finished pages as compressed files and sends them to guests. Its rule is that a page belonging to one visitor must never reach another, and anything it does not recognise means no cache.
Bot & Country Blocker also helps here: AI crawlers, scrapers and scanners are stopped before CS-Cart builds a page. It starts in learning mode, where rules only log what would be blocked.
Protecting accounts, forms and orders
| Risk | Add-on | Protection |
|---|---|---|
| Stolen admin passwords | Login Security: 2FA & Passkeys | Authenticator apps and passkeys for admins, vendors and customers |
| Form spam | Captcha Pro | Built-in check, Cloudflare Turnstile or hCaptcha, honeypot, rate limits |
| Fraudulent orders | Order Risk Guard | Fraud score, block and allow lists, hides cash on delivery for risky customers |
| Unknown changes | Admin Activity Log | Field-level history and alerts |
Two-step sign-in for admin accounts is the cheapest protection on this page, since a CS-Cart admin login reaches customer data. Add it first.
Tools for EU rules
These add-ons help you show or record what the rules ask for. They do not replace legal advice, and we make no promise that any store is compliant because it installs one.
- Cookies: Cookie Consent Manager is a self-hosted banner with a preference center, automatic script blocking, Google Consent Mode v2, Meta and TikTok consent signals and a consent log.
- Price reductions: EU Omnibus Lowest Price records each price change and shows the lowest price of the last 30 days.
- Product safety: GPSR Product Safety & EU Guarantee Labels helps you show manufacturer, EU responsible person, identifiers and warnings.
- Withdrawal: EU Withdrawal Button & Returns Portal helps you provide an online withdrawal function with a dated acknowledgement e-mail.
- Invoices: EU e-Invoicing produces EN 16931 formats.
Rules vary by country and business, so check with your adviser which of these apply to you.
Where to start with security, speed and compliance
- Protect logins: turn on 2FA for every admin account.
- Stop automated traffic: Captcha Pro for forms and Bot & Country Blocker for crawlers. Bots waste server time and skew your analytics.
- Fix images, then add a cache. A fast page helps both conversion and crawling.
- If you sell in the EU, go through consent, price history, product safety and withdrawal with your adviser, and add the matching tools.
- Keep records: Admin Activity Log shows what changed when something goes wrong.
If your store already uses the 4.21 full page cache, check each add-on’s page for cache support. Add-ons that print personal data on a cached page are a known risk, which is why our product pages state their cache behaviour.
FAQ
Questions and answers
Does the cookie banner support Google Consent Mode?
Yes. It is a self-hosted banner with Google Consent Mode v2, Meta and TikTok consent signals, automatic script blocking and a consent log.
Do these add-ons change core files?
No. Like every Kavio Labs add-on, they work through hooks only.
Do these add-ons make my store GDPR compliant?
No add-on can do that alone. They give you tools for consent and data handling. Your adviser decides what your store needs.
Which speed add-on should I install first?
Image Optimizer, since images are usually the heaviest part of a page. Then a page cache.
Does Full Page Cache Pro need Varnish?
No. It works on normal hosting, without Varnish, Redis or a server change.
Can I test bot blocking before it goes live?
Yes. Bot & Country Blocker starts in learning mode, where rules only log what would be blocked.
Do passkeys work for customers too?
Yes. Login Security supports authenticator apps and passkeys for admins, vendors and customers.
Can spam forms be stopped without a third party?
Yes. Captcha Pro has a built-in check with no third party, and can use Cloudflare Turnstile or hCaptcha if you prefer.
Kavio Labs
Also by Kavio Labs
The same standards, the same support desk and one licence portal on every platform we build for.