Documentation
Country Challenges
Country Challenges allow you to define blocks of countries from which all traffic will be challenged. This effectively blocks any automated traffic, whilst adding a small amount of friction for real end users.
We recommend challenging all areas which are not your primary audience locations in order to minimise malicious or otherwise problematic automated traffic without impacting your main user base.
Country Challenges can be enabled and configured on the Project Settings > Access Control page in our dashboard.
The Challenge Interstitial Page #
Real users whose traffic originates from a challenged location will be shown an interstitial page upon first navigating to your project. For most users this will only display for a couple of seconds whilst an automated check is performed. Once a user is confirmed as non-automated, they can access your project as normal for at least 30 minutes before another check is performed.
Any automated traffic will not pass the interstitial page check and will not be passed through to your project at all.
Safe List #
Servd maintains a 'safe list' of services that we will never automatically challenge via our Country Challenges or Under Attack mode settings. These primarily include services that trigger important webhooks that your project will want to listen out for at all times. A full list of safe services can be found here.