Custom Rules
LiveYour lists always win.
Rules override the computed score outright — an allow forces 0 and a block forces 100 — and the response names the rule that fired, so a surprising verdict is never a mystery. Rule management calls are free and do not count against your quota.
What it detects
- Allow your own office network and QA devices
- Block known bad actors permanently
- CIDR and ASN ranges, not just single values
- Block always beats allow on a conflict
- Bulk import from another provider's export
When to use it
Stop flagging your own staff, and make a fraud investigation stick.
Questions
Do rules apply to every endpoint?
Yes, including the unified signup score, where they apply per component. An allow rule on your office IP zeroes the IP component of a whole-signup score rather than being ignored there.
What happens if a value matches both an allow and a block rule?
Block wins. The matcher returns on the first block it finds and only falls back to an allow, because the cost of wrongly admitting a known bad actor is higher than the cost of wrongly challenging someone.
Can I migrate my existing lists?
Yes. The import endpoint accepts plain text or CSV, one entry per line, and auto-detects the kind of each value. Headers and extra columns from another provider's export are skipped rather than rejected.