rate-limiting
Rate limiting icon

Rate Limiting & Abuse Prevention

Rate Limiting & Abuse Prevention

Protect login and API surfaces from abuse, scanning, and credential stuffing.

Protect login and API surfaces from abuse, scanning, and credential stuffing.

Applies to

Security Program

Domain

Product Security

Overview

Rate limiting and abuse prevention controls help reduce automated attacks and protect platform availability. These controls are especially important for public endpoints, authentication flows, and API access.

Controls & Practices

- Rate limits applied to sensitive endpoints (implementation dependent) - Detection of anomalous traffic patterns - Recommended: enforce MFA and SSO for admin access - Use scoped API tokens and rotate regularly