# Rate Limiting

Monitor and configure API protection for your WebToCRM endpoint against abuse and DDoS attacks.

## How it works

Rate Limiting & Security tracks all inbound WebToCRM requests and measures them against your defined rules. The dashboard shows real-time counts for Requests Today, Blocked Today, Suspicious Today, and overall Effectiveness. When a request exceeds a rule's thresholds, it is blocked for the duration you specify.

## How to configure rate limiting
## Step 1: Open Rate Limit Settings

Go to Settings

Click WebToCRM

Click Rate Limit Settings

## Step 2: Set up default rules

Click Setup Defaults to generate a standard set of protection rules automatically

This is optional but recommended as a starting point before adding custom rules

## Step 3: Add or tune a rule

Open the Rules tab and click Add Rule

Enter a Rule Name and select a Rule Type

Set thresholds for Requests per Minute, Requests per Hour, Requests per Day, Burst Limit, Burst Window, and Block Duration

Toggle Enable this rule on and click Create Rule

## Step 4: Monitor traffic and manage IP access

Use the Violations and Logs tabs to review blocked or suspicious traffic

Use Global IP to review IP reputation data

Use Org Whitelist to whitelist IPs that should bypass rate-limiting rules

Setup Defaults can be run at any time to reset or initialize baseline rules.

Rules can be enabled or disabled individually without deleting them.

Original Outline page: https://wiki.alano.ai/s/alano-user-guideline/doc/rate-limiting-PEUx5koMlH

## Related guide pages

- [Alano User Guideline](https://alano.ai/docs/)
- [Customization](https://alano.ai/docs/customization-8ddSaxvPIY)
- [Welcome to Alano](https://alano.ai/docs/welcome-to-alano-1dTWipd7yW)
- [Features](https://alano.ai/docs/features-TcyTIG1kHe)
- [Contacts/Customers](https://alano.ai/docs/contactscustomers-LZZkPk05en)
- [Alatasks](https://alano.ai/docs/alatasks-rfB2f4M6Ho)
- [Deals](https://alano.ai/docs/deals-glGb1Ojq9n)
- [Custom Objects](https://alano.ai/docs/custom-objects-vKkregeoYs)
- [Alanotes](https://alano.ai/docs/alanotes-qFBrxuMSQa)
- [Resources](https://alano.ai/docs/resources-C4DgheeRju)
- [Intelligence](https://alano.ai/docs/intelligence-C27rBzbm0P)
- [Settings](https://alano.ai/docs/settings-WGYKnuS6lc)
- [Landing Pages Builder](https://alano.ai/docs/landing-pages-builder-HZh7Maos5h)
- [Inbound APIs](https://alano.ai/docs/inbound-apis-btxSF3yNBs)
- [Whitelist](https://alano.ai/docs/whitelist-u5g5sQmGTa)
- [Operations Settings](https://alano.ai/docs/operations-settings-maQtddylTf)
- [Web-To-CRM Endpoint](https://alano.ai/docs/web-to-crm-endpoint-B3hTs4RORo)
- [Flow](https://alano.ai/docs/flow-ce4c7oq0eF)
- [Custom Fields](https://alano.ai/docs/custom-fields-PZqIx0lFrT)
- [Productivity](https://alano.ai/docs/productivity-CzlLb3Lfoc)
- [Alano AI Chatbot](https://alano.ai/docs/alano-ai-chatbot-V1d6NJepW1)

Last generated: 2026-06-30