How do custom rules work?

Rules add your own limits on top of the automatic protection: If something happens more than a number of times within a time window, then watch, slow down, ask to verify or block, and optionally tell you.

Example: if failed logins are more than 10 within 300 seconds per IP address, then ask to verify. Create rules in Defend → Rules. If several rules match, the strictest one wins.