# Security

## Bot protection

- **BotGuard** - Bot/AI detection
- **Rate limiting** - Limit requests per IP
- **Block/allowlist** - Block or allow IPs

## Session settings

- **Session timeout** - Default 3600 seconds
- **Max login attempts** - Default 5 attempts