Skip to main content

Secondary Verification

Secondary Verification is a procedure that verifies whether a user is a legitimate accessor through additional security verification steps when determined to be a bot by behavior analysis policies.

Overview​

Secondary verification operates only in Blocking Mode. It does not proceed in detection mode.

Verification Types​

BotManager provides two secondary verification methods:

TypeDescriptionFeatures
CAPTCHAImage-based human verification testRequires direct user input
Browser ChallengeAutomatic browser environment verificationAutomated processing, minimal user intervention

Verification Type Selection​

Select and apply one verification type in the console:

CAPTCHA Verification​

How It Works​

CAPTCHA verification proves that the user is human by having them directly input characters or patterns displayed in images.

Success Conditions​

To pass CAPTCHA verification, you must satisfy both the set success count and attempt count.

Configuration ItemDescription
Success CountNumber of successes that must be achieved in CAPTCHA verification
Total Verification CountMaximum number of verification attempts allowed

Example:

  • Success count: 3
  • Total verification count: 5
  • → Must succeed 3 times within 5 attempts to pass

Failure Conditions​

Verification is treated as failed if any of the following conditions apply:

  • Verification attempt count exceeded
  • Success count not met
Note

Verification count is only counted when the [Submit] button is clicked. Clicking the Refresh button is not included in the count.

CAPTCHA Verification Flow​

Browser Challenge​

How It Works​

Browser challenge automatically verifies the user's browser environment to confirm it is a real browser.

  • Minimal user intervention
  • Automated verification process
  • Fast processing speed

Verification Items​

Main items verified in browser challenge:

Verification ItemDescription
JavaScript ExecutionWhether JavaScript executes normally
Browser FingerprintVerify browser unique characteristics
Cookie SupportWhether cookies are stored and transmitted
Rendering EngineVerify actual browser rendering engine

Behavior Analysis Policies and Secondary Verification​

Secondary verification can only be applied to Behavior Analysis Policies. It is not applied to static policies (automation tools, header analysis, etc.).

Applicable Policy Types​

Policy TypeSecondary Verification Applicable
Browser Automation ToolsX
Developer ToolsX
Header AnalysisX
IP ManagementX
Foreign IP ManagementX
Behavior Analysis PoliciesO

Configuration Location​

You can individually configure whether to apply secondary verification and verification counts for each behavior analysis policy.

Overall Processing Flow​

Verification Result Processing​

On Success​

  1. Call /release API to release block
  2. Move to original service page
  3. Process as normal user

On Failure​

  1. Call /block API to register block
  2. Move to block (Deny) page
  3. Maintain block until automatic block release time

Statistics Check​

Secondary verification results can be checked in Bot Type Statistics:

  • Number of secondary verification exposures
  • Success count
  • Bot detection rate

For more details, see Bot Type Statistics.