Protection that fits into your stack.
Get the foundations right first: prove the domain, install one versioned script, then move from observation to active controls with evidence.
Three steps to a protected site
-
Verify your site
Add a unique DNS record so IVTB knows the domain is yours to protect.
-
Install one small snippet
Place the versioned client on your site and confirm live traffic from the dashboard.
-
Review, then protect
Start in log-only mode, understand the signal, and activate the policy that fits your risk appetite.
How a traffic decision is made
1. The snippet loads
A verified publisher site loads the versioned IVTB snippet, which calls the bootstrap endpoint with its public site key.
2. The request is validated
The edge validates the origin and site, checks policy and whitelists, and reuses a signed decision or cache when one already applies.
3. Risk is assessed when needed
A rate-limited intelligence path assigns a risk result only when no valid cached decision exists, keeping repeat checks to a minimum.
4. The configured policy applies
Depending on the account's policy, the request is allowed, logged, challenged, redirected, or blocked.
5. Usage is recorded
Configuration, operational events and usage are recorded for the account's own visibility and billing.
Proportionate, not binary
Every decision resolves to one of five outcomes, chosen by the policy an account configures rather than a fixed rule IVTB applies on its own:
- Allow — the request proceeds as normal.
- Log — the request proceeds and the decision is recorded for review, with no visible change.
- Challenge — the visitor completes a challenge before proceeding.
- Redirect — the request is sent to a configured destination.
- Block — the request is refused.
New trials start in log-only mode so you can review real traffic before choosing a stronger response.
Where to go next.
Looking for security and data-handling details?+
See the security overview for data minimisation, encryption, tenant isolation and fail-safe operations.
Looking for definitions of invalid traffic terms?+
See the glossary for invalid traffic (IVT), GIVT, SIVT and the terms used across this site.
Looking for plan limits and billing details?+
See pricing for plan limits, billing terms and the trial policy.
Create your workspace.
Verify one domain, install one snippet and start with a clear three-day view of your traffic.