A mechanism that caps the number of requests allowed in a given time period.
A mechanism that sets an upper limit on the number of requests per unit of time, curbing brute-force attacks and DoS-style overload. Rather than applying a single blanket limit, real deployments typically tighten it selectively -- for instance, only after repeated failed logins -- so legitimate users aren't inconvenienced.
© 2026 ITBGM