Security Hub

Bring your software development workflows to security

logo-peak-creation

Suspicious signups increase

Signals & Triggers

On user signup
If an unusual volume is detected

Actions

  • Log the malicious request Log the malicious request
  • Report an incident Report an incident

Notifications

  • Send an email to all team members Send an email to all team members
  • Send a Slack notification. Send a Slack notification.
  • POST to your Webhook. POST to your Webhook.

Details

This plugin triggers when an unusual volume of accounts are created from one or multiple IPs in a short period of time.

This may be an early hint that an attacker is trying to reverse engineer your signup mechanism or stacking dormant accounts to be used in a future attack. It could also be an abuse of your service limit (freemium business models).

This plugin is not always synonym of a malicious activity.

Advanced details

Sqreen SDK enables you to track all signup activities happening in your app.

Every minute Sqreen computes the signals and looks for unusual volume of signups.

The signal computation happens on Sqreen’s backend based on the signals collected on all the instances of your applications. This collection happens asynchronously and is not slowing down your app performance.

Language support

  • Ruby
  • Node.js
  • PHP
  • Python
  • Java

Data collected by Sqreen

Signals

Signups (Sqreen SDK)


On attack

The peak is detected from recent signup data.

Built for developers and modern apps

Get up and running in minutes just by installing our lightweight library. Enable plugins in just a couple of clicks.

  • Node.js
  • Ruby
  • PHP
  • Python
  • Java
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9

$ npm install --save sqreen

$ echo '{ "token": "your token" }' > sqreen.json

 

// This should be the first line of your app

require('sqreen');

$ echo "gem 'sqreen'" >> Gemfile

$ bundle install

$ echo "token: your token" > config/sqreen.yml

$ curl -s https://download.sqreen.io/php/install.sh > sqreen-install.sh && bash sqreen-install.sh your token

$ pip install sqreen

$ echo -e "[sqreen]\ntoken: your token" > sqreen.ini

 

# Insert at the top of your app file (typically wsgi.py or app.py)

import sqreen

sqreen.start()

$ curl https://download.sqreen.io/java/sqreen-latest-all.jar -o sqreen.jar

 

// Add JVM startup options:

-javaagent:/path/to/sqreen.jar -Dsqreen.token={{your token}}

Build amazing products. Keep them safe.

3 min installation · Try all features for 14 days · No credit card required Get started Request demo