Security
Understand Cloud advisory security decisions.
Advisory decisions
Cloud returns allow, challenge, or deny. The Own Auth package remains the enforcement point. When Cloud is unavailable, it uses an unexpired cached decision when one exists, then continues under Own Auth's built-in local rate limits.
Signals
| Signal | Plans |
|---|---|
| Automated login behavior | Free, Pro, and Scale |
| Credential stuffing patterns | Pro and Scale |
| Impossible travel | Pro and Scale |
| Shared IP reputation without sharing user identity | Scale |
Privacy
Cloud stores per-app digests for network and device signals. Raw passwords, tokens, codes, authentication URLs, provider diagnostics, and message bodies are rejected or excluded.