Challenges
Making a suspect caller prove something, instead of guessing whether to refuse them.
Crawlers and AI agents
Proving a crawler is who it says it is, and deciding what the rest may do.
Honeypots and canaries
The cheapest detection there is, and the one with almost no false positives.
Login guard
Credential stuffing, password spraying and likely account takeovers, seen on the login endpoints.