cscli collections install crowdsecurity/appsec-bot-challenge-strictStrict variant of appsec-bot-challenge.
Same scoring engine and exclusions, but rejects challenge submissions scoring >= 45 — it catches more bots than the
balanced default at the cost of more potential false positives. Use it when bot pressure matters more than the
occasional wrongly-challenged visitor.
For less strict options, see:
>= 75)>= 100).Sub-collections:
Threshold config:
>= 45.Scenarios (alert on challenge abuse):
Parsers:
Contexts (enrich alerts with fsid, OS, and the bot signals that fired):
See appsec-bot-challenge for setup and WAF acquisition details.