See the network behind each visitor, and write rules on it
Security Analytics names the networks your visitors come from, any traffic rule can match a network with req.asn, and load-test tools now count as automation.
10 entries in Security Clear filters
-
-
Iris and your secrets: shown once, masked, kept in your account
A key Iris creates for you is shown once, to you. Saved Slack and webhook URLs show only their domain, and alert emails go only to your account's members.
-
Behind Cloudflare: see the real visitor, block a spammer in one click
Sites behind Cloudflare now show the visitor's own IP in your logs and IP rules, and Iris flags a flooding visitor you can block in one click.
-
API keys that are yours, and account keys for CI
Your API keys are now yours and work in all your accounts. Account keys belong to the account, act with the role you pick and keep working when people leave.
-
Connections per visitor IP: one address can't take a whole tunnel
Every visitor IP gets its own share of a tunnel's connections, so one client opening connection after connection can't lock everyone else out.
-
Client certificates for mTLS, without running your own CA
Create a certificate authority in ngris, issue a certificate for each device and revoke a lost one. Endpoints let in only the devices you trust.
-
Sign-in protection: known devices and sign-in methods in your log
Password guessing against your account no longer stops the browser you use. And each sign-in in your Activity log says how it was made: password, SSO and MFA.
-
Check webhook signatures at the edge, before deliveries reach you
The Verify webhook rule refuses deliveries without a valid signature at the edge, so forged events never reach your server. Its secret is never shown again.
-
Signed visitor identity for endpoints behind single sign-on
After someone signs in at the edge, each request your app gets carries a token signed by ngris that names them and their roles. Your app can verify it.
-
Challenge bots without dropping out of search
Under attack mode checks each visitor's browser and stops scripts, while verified search engines and AI crawlers keep reaching your site.
