Policies
Turn a verdict into an automatic Block or Allow decision, so you do not hand-write rules in every service. Configured once, evaluated on every lookup.
Team plan and aboveStrategies
| Strategy | Behavior |
|---|---|
| Allow all | monitor only, never block |
| Normal | block known anonymization services (recommended default) |
| Aggressive | block all anonymized traffic |
| Custom | your own rules over infrastructure type, country, service and device |
Inputs a rule can use
Every attribute Farox already returns: network type (VPN / proxy / Tor / datacenter), ASN reputation, named service, ISO country, device class and automation, plus our own honeypot threat tags. Rules combine with allow/deny lists per service and per country.
The decision
A policy returns a decision of block or allow on the Context response, cached for a configurable max TTL. Enforcement stays yours, act on the decision in your app, or push it to the edge with the Cloudflare / Fastly / CloudFront snippets.
Status: rolling out. The classifier already returns every input above, the policy layer and console editor are in active development.