Shield Shopify Site From Bots

My Shopify store is getting hammered by fake bot visitors on a daily basis and I need that to stop across the entire website, not just the checkout or login screens.

Here is what I’m after:
• Audit the current traffic patterns and pinpoint how the fake bot visitor traffic is getting through.
• Configure or recommend the right mix of Shopify-native settings, third-party apps, and services such as Cloudflare, reCAPTCHA, or rate-limiting rules to block or challenge this traffic without slowing genuine shoppers.
• Implement and test the solution end-to-end so normal users can browse, add to cart, and check out with zero friction.
• Provide a brief hand-off document explaining what you changed and how I can monitor or tweak the protection going forward.

Acceptance criteria
1. Automated traffic from the identified fake bot sources no longer shows up in real-time analytics or server logs.
2. Legitimate users can reach every page and complete a checkout.
3. No measurable slowdown in page-load speed after mitigation is applied.