Changelog

Agencies can now see the health of every client in one place: whether the tracking code is on each website, when traffic last arrived, whether Google Ads is linked, and 30 days of ad spend.

Hover a client’s status, or tap it on a phone, to see why it reads Healthy, Monitor or Needs attention and what to do next.

If Google stops letting us into one of your Google Ads accounts, for example because the login was removed from it, we now email you and show it in your dashboard, with how to fix the connection.

The same goes for the sign-in you connected Google Ads with. If Google stops accepting it, we email you and your dashboard shows that blocking has stopped. Signing in again starts blocking again.

Either way, blocks we couldn’t add wait and go in once it’s fixed.

When you link a client’s Google Ads account, you can now search the list by account name or customer ID, with or without the dashes.

The Campaigns page now lists and counts all of your campaigns, however many you run. It used to stop at 500.

We’ve relaunched clickguardian.ai with a new design. The app, sign-in pages and our emails now use the new ClickGuardian logo too.

Nothing about how your protection works has changed.

Paused Microsoft Ads campaigns are now marked as paused and listed last on the Campaigns page.

Sign-in links now work for companies whose email security checks links before you click them.

If you’re advertising in ChatGPT, those clicks are now recognised as ad clicks and checked for fraud like the rest of your paid traffic. Anything we block is excluded from your Google Ads as well.

Click limits are now live. They decide how quickly we block an address that keeps clicking your ads.

Under Settings, pick Careful, Balanced or Strict, or set up to five limits of your own, like two paid clicks in 24 hours. If you haven’t picked one, your sites are on Balanced.

Addresses blocked by a click limit are released after 7 days, so an address that passes to someone else isn’t shut out for good. Blocked visitors shows when each one lifts. Manual blocks stay until you remove them.

If you run Microsoft Ads, your campaigns now open onto their ad groups and ads, the same way your Google Ads ones do. Your Microsoft keywords now appear in the Keywords table too, using the tracking tags Microsoft adds to your ad clicks.

Conservative, Balanced and Aggressive are now Careful, Balanced and Strict. Your settings haven’t changed, only the labels.

Campaign spend now always shows in your ad account’s own currency, and accounts in different currencies are no longer added together.

Scheduled email reports can now go to up to 20 addresses instead of one. Add them under Settings, Email reports. Leave the list empty and they still go to your account’s owners and admins.

The links in your scheduled email reports now open your dashboard and report settings instead of a missing page.

New accounts now start in the redesigned dashboard. Existing accounts can switch in Settings, and back again from the sidebar menu.

Campaign tables now lead with the clicks we blocked, and call the rest Suspicious: clicks with at least one warning sign. We only block when the evidence is strong, so a suspicious click is often a real customer.

If your Microsoft Ads connection stops working, Settings and Campaigns now say so and offer a one-click reconnect.

Fraud alert emails can now arrive within minutes of a suspicious click, so you can pause a campaign while an attack is still happening. They now work on every plan too.

Weekly protection reports now show your blocked clicks and fraud spend on every plan, with ad spend in your Google Ads account’s own currency.

The ad group, ad and keyword tables on the Campaigns page now load a page at a time, so big accounts open quickly. Search now covers every ad and keyword, not just the top 500.

We’ve redesigned the ClickGuardian dashboard. Plain language instead of jargon, the money up front, and fewer places to look. It’s built for the way most people use ClickGuardian: a quick check once a week to see what fraud tried and what we stopped.

Overview now leads with the wasted ad spend we stopped, in your ad account’s own currency, and what we’re still keeping an eye on. The side menu is grouped and labelled (Dashboard, Protection, Account), and you can still collapse it. Click activity opens each visit in a side panel with that visitor’s timeline, so you never lose your place in the list. Settings are on one page, and your account and billing have moved into the menu at the bottom of the sidebar.

Blocked visitors shows who we’ve blocked and who we’re watching at a glance. If we block someone who turns out to be a real customer, mark them as one and we’ll let them through. For a home or office connection you can also keep them unblocked for 90 days. And if we stop receiving data from your site, the dashboard tells you straight away and how to fix it.

It’s opt-in for now. Choose Try the new interface on the banner in your dashboard, or switch in Settings. If you want to go back, Back to the old interface is always in the sidebar menu. Your protection carries on exactly the same either way, because both run on the same data and the same detection.

It’s new, so if anything looks off or you can’t find something, tell us in chat.

If part of your site lives on a subdomain, like a shop or a booking page, you can now switch on Also track subdomains under the site in Settings. You’ll also see the option when you add a new website.

We’ve tuned several detection rules this month, mostly so some genuine iPhone and Performance Max clicks aren’t treated as suspicious. Google tags many of these clicks differently from a standard ad click, and a few of our rules were reading that as a warning sign when it isn’t.

If your fraud rate dips a touch, that’s why.

The bell used to list every click we blocked, which buried anything useful. It now shows changes to your account, like a new team member or an ad account that’s disconnected, and repeats of the same thing are grouped into one line.

Quite a few sites had our tracking tag installed twice, usually once directly and once through Google Tag Manager. That was counting some ad clicks more than once. Our tracker now starts once per page however many times it loads, and Settings tells you if the tag is on your site twice and shows which copy you can remove.

If your ad click numbers look a bit lower from late September, that’s why. They’re the right ones.

If you use fake lead detection, some genuine enquiries were being flagged as test data because of how the form was built. A first name box on its own, or boxes for phone numbers and postcodes, were being misread by our checks as name fields. That’s fixed for new enquiries.

You can now sign in to ClickGuardian with a passkey instead of a password. A passkey uses your fingerprint, face recognition, device PIN or a security key, and it only works on the real ClickGuardian sign-in page, so it cannot be phished.

To set one up, open your profile page and choose Add a passkey. Your device or password manager (Apple Passwords, Google Password Manager, 1Password and others) keeps it and can sync it to your other devices. You can add more than one, rename them and remove them whenever you like, and we email you each time one is added or removed.

Your password and Google sign-in keep working, so there is nothing you have to change. Next time you sign in, choose Sign in with a passkey and pick your account from the prompt. No email or password needed.

Passkeys are new, so if anything gets in your way, tell us in chat.

You can now invite other people to your ClickGuardian account from Settings, then Team. Each person gets an access level: view only, manage blocking and settings, or full admin. Someone with view only access can read the reports but cannot change anything, and you can change or remove anyone’s access at any time.

If you look after websites for different clients, you can limit a person to just the sites they should see instead of all of them.

Invitees can join with Google or by setting a password, so nobody is waiting on a link to get started.

The official ClickGuardian plugin is now listed in the WordPress plugin directory. Search for ClickGuardian in your WordPress admin, install it in one click, and updates arrive automatically like any other plugin. If your site runs on WordPress, this is now the easiest way to get protected.

If you install ClickGuardian through Google Tag Manager, the dashboard now confirms your install from the data actually arriving rather than scanning your page source. No more being told your tracker is missing when it’s working fine.

The date picker now only offers dates that can actually hold data, and an empty view tells you why it’s empty and gives you a way back to a range that isn’t.

We rebuilt ClickGuardian from the ground up on our own in-house detection engine. Same mission, protecting your ad spend from clicks that were never going to become customers, with a lot more muscle behind it.

Highlights of the new platform: campaign drill-downs from campaign to ad group to keyword, a click-level activity log so you can see exactly what was blocked and why, fake lead detection for the forms fraudsters love to fill in, an official WordPress plugin, a dashboard you can install as an app, and a redesigned weekly report email that tells you what actually happened.

This page is where we’ll keep an honest record of what ships from here on. No roadmap promises, just what’s live.

A new hourly fraud breakdown on your overview page shows when in the day the dodgy clicks turn up. The same breakdown now appears in your weekly report email, so the pattern is hard to miss.