OptionalblockBot score threshold at which requests are blocked.
Default: 75.
OptionalchallengeBot score threshold at which requests are challenged.
Default: 50.
OptionalenableEnable advanced behavioral biometrics analysis (mouse/typing dynamics).
Session-level behavioral heuristics still run when metrics are present.
Advanced analysis requires Pro or Enterprise. Default: true.
OptionalenableEnable cross-plugin signal enrichment from ip-devicer, tls-devicer, and
peer-devicer. Requires Pro or Enterprise license. Default: true.
OptionalenableEnable user-agent analysis. Default: true.
OptionalenableEnable request velocity tracking. Default: true.
OptionallicensePolar license key that unlocks Pro or Enterprise tier features.
| Tier | Price | Device limit | Servers |
|---|---|---|---|
| Free | $0/mo | 10,000 | — |
| Pro | $49/mo | Unlimited | 1 server |
| Enterprise | $299/mo | Unlimited | Unlimited |
Cross-plugin signal enrichment (enableCrossPlugin) requires Pro or
Enterprise. Obtain a key at https://polar.sh.
OptionalmaxMaximum number of BBAS snapshots stored per device.
Default: 50 (Pro/Enterprise) or 10 (free tier).
OptionalmaxMaximum allowed requests per velocityWindowMs before the velocity
signal fires. Default: 120.
OptionalrulesCustom rules to merge with the default rule set. Custom rules are
evaluated before default rules when their priority is < 100.
See BbasRule.
OptionalstorageCustom storage backend. Defaults to the built-in in-memory store.
Use createSqliteBbasStorage, createPostgresBbasStorage, or
createRedisBbasStorage for persistent backends.
OptionalvelocityLength of the request velocity sliding window in milliseconds.
Default: 60_000 (1 minute).
Options accepted by the BbasManager constructor.