Challenge suspicious requests before they reach your app

Create a Challenge action and attach it to a rule to require a browser proof-of-work check before a matching request reaches your application. Visitors who pass receive a clearance cookie for that rule, while non-HTML clients receive a machine-readable response with a challenge URL.

All servers on the team must run FlowGuard Proxy v0.8.0 or newer before you can save a challenge action or rule. See the challenge behavior guide for clearance details.