Agent Configuration

Configure detection rules and analysis settings

Monitored Endpoints

/api/auth/*

/api/payments/*

/api/users/*

Sensitive endpoints (higher sensitivity)

/api/admin/*

/api/payments/process

Failed login threshold: 10

Time window (minutes): 5

Credential stuffing detection

Detect distributed login attempts

Admin anomaly detection

Alert on unusual admin activity

Allowlist IP ranges

401/403 burst threshold: 50

Rate limit per IP (req/hr): 1000

Scan path patterns to detect

/.env

/.git

/wp-admin

/phpmyadmin

Gmail

Connected via OAuth

Scan schedule