# Rate limits transcribed from the provider's own documentation — see provenance. Quoted, not derived.
generated: '2026-09-20'
method: searched
source: https://fusionauth.io/docs/operate/secure/advanced-threat-detection
sources:
- https://fusionauth.io/docs/operate/secure/advanced-threat-detection
provenance:
  tool: planning/api-economics/harvest_ratelimits.py
  run: 20260920T133210
  grounding: every limit_text was found verbatim in the fetched page text
published: true
note: Page describes configurable per-tenant rate limiting (failed login, forgot password, verification
  emails, etc.) as part of Advanced Threat Detection. The only numeric value stated is the default of
  five attempts with a minute lockout; an illustrative example of 'five per sixty seconds' is also given.
  No response headers or HTTP status codes for rate limiting are documented.
limit_count: 1
limits:
- name: Default failed login rate limit
  limit_text: five attempts with a minute lockout
  limit: 5
  window: minute
  scope: user
  plan: Enterprise