🔍
Brute Force Detection
Tracks login attempts per IP in a rolling 10-minute window. Any IP exceeding 5 attempts is flagged CRITICAL immediately.
✓ Live Now
🕐
Off-Hours Access Flag
Logins between midnight and 6am receive an elevated anomaly score. Configurable to your business hours.
✓ Live Now
🌐
Threat Feed IP Check
Every login IP is cross-referenced against real live botnet and malware IP databases updated every 30 minutes.
✓ Live Now
🤖
Bot & Script Detection
Identifies automated login tools by user agent — curl, wget, Python requests, Masscan and others.
✓ Live Now
📊
Anomaly Scoring
Each login event receives a 0–100 anomaly score with severity (LOW / MEDIUM / HIGH / CRITICAL) and list of triggered flags.
✓ Live Now
🧬
Behavioural DNA Profiling
Full per-user keystroke, mouse, and workflow profiling to detect account takeover even with valid credentials.
◦ Coming Soon