Replies: 0
Hi there,
I did a scan on our website and a penetration test reveals that the login page has the potential of brute force login. The tool tested a few logins but failed. But the report states that it is possible to brute force a login a matter of few attempts as well.
Under Settings > Alerts > Password Guessing Brute Force Attacks – is it possible to lower the number to less then 30 failed login attempts? eg. Block after 10 failed login attempts?
Thank you in advance