Form Security
Login Attempt Limiting Check
Brute‑force attacks target your login forms. Learn how to check that limiting mechanisms (rate limiting, CAPTCHA) are in place to secure authentication.
What this test checks
This test detects whether login attempt limiting (rate limiting) mechanisms are active on your authentication forms. The absence of protection exposes your accounts to brute‑force attacks, where scripts try thousands of password combinations to take over an account.
Our recommendation
Implement login attempt limiting (e.g., 5 attempts in 15 minutes) with temporary blocking. Use CAPTCHAs on login forms. In Laravel, enable rate limiting in config/app.php or use packages like Laravel Fortify. Also consider two‑factor authentication (2FA) for sensitive accounts.
Security tests
Read more
Sensitive Files