Display detailReadable stories and guided controls.Changes what you see, not collection, alerts, response or permissions.
Custom request rules
Define local observations using reviewed conditions. Enabling a rule records matching routed requests; it does not block a request or send an alert. Bundled Free detections continue independently.
Display timezone: UTC
At most 64 enabled rules, 20 terms per rule and 4 expression levels. New rules start disabled. Only numeric query keys and values are supported; no raw query, body, source address or operator path is copied into custom finding evidence.
Saved rules
No custom rules yet. Preview your first rule below before saving it.
Create a rule
Grammar and coverage
Use all/any groups with a terms array. Leaves: method in an allowed method list; path equals or segment_prefix; query present or equals with a known numeric key. Every OR branch needs a restrictive path/query selector. Prefixes respect slash boundaries; path case is significant. Ambiguous encoding, duplicate keys and parser limits produce unavailable custom analysis. Editing appends a version (at most20); disabled versions remain readable.
Only WordPress-routed requests are available. Cached, static and upstream traffic is outside this observer. Historical query values and arbitrary paths were not retained, so projection may be unavailable. A match proves only that an operator-defined condition matched, never intent or compromise.
Session expired
Please log in again.
The login page will open in a new tab. After logging in you can close it and return to this page.