Risk Timeline
Human, suspicious and blocked pressure by bucket.
Sentinel
Traffic protection
Time zone
Language
Protection Overview
Current traffic decisions and signals that need your attention.
demo
Traffic intelligence
Protection Overview
Current traffic decisions and signals that need your attention.
Account
Account
Plan, available limits, invoices and organization details in one place.
Billing profile
Organization requisites
Checking saved requisites...
Organization details are changed by the platform administrator after a support request.Customer control plane
Protected Resources
Manage protected domains and choose how suspicious traffic is handled.
Add protected resource
API protection FAQ
Proxy mode lets Sentinel enforce decisions before origin. Decision mode lets the client load balancer ask Sentinel for a prediction and enforce it locally.
Create an API or Mobile API resource, keep Observe mode first, point the test domain to Sentinel gateway and pass safe correlation headers from the edge.
X-Request-ID or Idempotency-Key, X-API-Nonce, X-API-Timestamp, X-Sentinel-Account-Hash, X-Sentinel-Token-Hash and X-Sentinel-Body-Hash.
No. Authorization, API keys, cookies and request bodies stay on the customer side. Sentinel receives only presence flags and hashes.
Client onboarding
Integration
Connect your edge to the Decision API and add Browser SDK telemetry when the protected resource has web pages.
Create a protected resource first
The connection passport and configurations are generated for a specific resource.
Keep the server credential private
Use it only on your gateway or backend. Never place it in Browser SDK code, a mobile application or a public repository.
Connection passport
Protected resource settings
Configuration guide
Choose an integration scenario
Support and incidents
Session Investigation
Explain a challenge or block without exposing internal detection rules.
Enter the session ID received in the X-AntiBot-Session-ID header.
Protection Settings Device, network, crawler and country controls
Core scoring signals
0 detections
Core Detections
Every detector that can add risk score or issue an immediate automated-client decision for this resource.
Lists and Exceptions Explicit allow, block and excluded URL rules
Blocklist
URL Exclusions
Allowlist
Audit
Actions by users who have access to this tenant.
Client registry
Clients
Legal entities, administrators, subscriptions and onboarding status.
| Client | Requisites | Administrator | Plan | Resources | Onboarding | Actions |
|---|
No clients foundChange the filters or create a new client.
SaaS billing
Billing overview
Financial summary and SaaS plan catalog. Client operations are managed from client cards.
Operations
Platform Status
DDoS emergency mode
Block suspicious traffic
When enabled, yellow-zone requests are rejected instead of being challenged.
Off
L7 anti-DDoS
Application-layer pressure
Redis-backed distributed counters across gateway and collector instances.
Ingestion queue
Queue lag and DLQ
Redis Stream health for ClickHouse ingestion, retries and dead-letter messages.
Data clusters
Storage and reputation scope
ClickHouse shards and the reputation plane used by gateways.
Network intelligence
Manual datacenter, proxy and TOR ranges
Global operator-maintained signals used when GeoIP/ASN data is incomplete.
Operational health
System Components
Priority queue
Requires Attention
Fleet overview
All remote installations
Summary across all clients, product versions, license and trust status.
Access Management
Principals, roles and API keysActive Principals
Platform audit
Client and platform-operator changes for the selected tenant.
Visitor Tracking
System operator viewCurrent Visitor
No visitor selectedSession Tracking
Inspect requests, detections and browser events even when no fingerprint is available.
Enter a session ID to inspect its complete event history.
Tracked Fingerprints
0 trackedEvent Stream Console
A compact workspace for recent decisions, browser telemetry and calibration signals.