Security levels
How strict each site is, and how to change it.
Scores run from 0 (bot) to 1 (human). Each level sets where a score passes, where it fails, and how much proof of work the browser does.
| Level | Passes at | Fails below | Proof of work | Live challenge | Datacenter networks |
|---|---|---|---|---|---|
| Relaxed | 0.3 | 0.05 | 33k hashes | Never | Scored normally |
| Balanced (default) | 0.5 | 0.1 | 131k hashes | Suspicious traffic | Scored normally |
| Strict | 0.7 | 0.2 | 524k hashes | Suspicious traffic | Always challenged |
| Under attack | Never | 0.3 | 1M hashes | Suspicious traffic | Always challenged |
Under attack puzzles everyone and turns itself off after the time you choose, from the dashboard or the API.
Per-action levels override the site's level for one data-action, for example login: strict.
Custom starts from Balanced; set any of the numbers yourself under Advanced numbers.
Country and network rules run first: block, challenge, or allow (skip the rules but still score the visitor).
Changes reach every edge location within 10 seconds.