Detect attack in progress or failed login count from a rule

[francesco.venica]

Hello,

I would like to detect if an attack is in progress or the count of failed login from a rule (without need to use external services), is this possible somehow?

many thanks
Francesco

[dan.woda]

Hi @francesco.venica,

Welcome to the Auth0 Community Forum!

As of right now, it does not look possible to count the failed login attempts in a rule. Rules run on success, which would make counting failed logins not a possibility there, even when using your own logic.

The best thing I can recommend is our anomaly detection features:

Brute-Force Protection

You can use this tool to alert administrators and users.

If you would like to submit a feature request for a more customizable solution we would love to hear more about your use case and needs on our feedback page.

Thanks,
Dan