TraceSecurity
Use attack mode to rate-limit visitors sending abnormal bursts of traffic.
Settings → Security protects your stats from floods of fake traffic. It needs the Editor role or above.
Attack mode
Attack mode rate-limits and drops events from any visitor sending an abnormal burst of traffic — 30 or more events in a minute — before they reach your dashboard. Once a visitor hits the limit, their further events in that minute are rejected.
| Setting | What it does |
|---|---|
| Enable attack mode | Turns rate-limiting on for this site right now. |
| Auto-enable on spike | Turns attack mode on automatically when a traffic spike is detected. |
Both are off by default; click Save after changing them.
Auto-enable on spike relies on spike detection, so it only works while Traffic spike alerts is switched on in Settings → Reports (see Alerts and email reports). When a spike turns attack mode on, the spike email tells you.
Known bots aren't affected by attack mode — they're already kept out of your stats and shown on the Bots page.