Skip to main content
The Security tab is one card: Attack mode. It rate-limits a visitor who sends an abnormal burst of events, so a flood does not fill your reports. Open Settings → Security. Each switch saves as soon as you flip it. You need permission to configure the site (editor, admin, or owner).

Enable now

Turn this on when you want rate limiting right now. While it is on, Trfyx counts events from each visitor over the last 60 seconds. The 30th event in that window is still stored. The 31st and later are rejected and never stored. Detected bots are not rate-limited. Session replay is also capped while attack mode is on: a session can send at most 60 replay batches per minute. Turn Enable now off to stop rate limiting. Auto-enable does not turn itself off later.

Auto-enable on spikes

This does not rate-limit by itself. It waits for a traffic spike, then turns Enable now on for you. The spike check is the same hourly check behind Settings → Reports → Traffic spike alerts:
  • The last hour has at least 10 visitors.
  • That count is at least 3 times the hour before.
Auto-enable only runs if Traffic spike alerts is also on. The spike checker does not look at sites that have that email off, so this switch does nothing on its own.
When a spike trips and this switch is on, Trfyx turns Enable now on and the spike email says attack mode was enabled. You turn it off yourself when the burst is over.

Which switch do I want?

Flip Enable now. Extra events from a visitor who is already over 30 in the last minute stop being stored.

Next steps