GhostShield scores every request against live threat signals — brute force, credential stuffing, bot swarms, payload fingerprints — and bans automatically in under 100ms. Powered by SENTINEL, the same engine that guards the Graylight fleet perimeter, 24/7.
Threshold breach triggers an automatic ban. Configurable windows (e.g. 5 fails / 10 min), propagated fleet-wide in under 100ms.
Define detection rules by IP range, user-agent, request frequency, and payload fingerprint. Every scan is scored against them.
Full audit trail of every blocked request — timestamp, IP, rule triggered, action taken. Tamper-proof, exportable for compliance.
Billing handled by Chancellor, Graylight's PCI-scoped orchestration layer. GhostShield never sees or stores your card.