Rules and limits
Automatic kill
Kill a key by itself the moment it looks leaked.
Vallkey can kill a key by itself, the moment it looks leaked, instead of waiting for you to read an alert:
| Setting | Kills the key when |
|---|---|
blockedPerMinute | This many requests are blocked within one minute. Someone trying a stolen key usually hits many blocks quickly. |
onNewCountry | A request comes from a country the key was never used from. |
onSpike | Requests in an hour reach 10 times the usual hour, and at least 100. |
A new key first learns what normal looks like: new countries and spikes are only judged after it has been in use for an hour and handled 20 requests. The request that trips the kill is refused too. Everyone gets an alert, the audit log shows "Vallkey (automatic)" with the reason, and you can revive the key as usual.
Still have a question?
We read every email, usually within a day.