FAQ

Frequently Asked Questions

Short answers about Crytify request trust, modes, credits, and advanced abuse signals.

Is Crytify only bot detection?

No. Crytify evaluates request trust using private internal checks and returns a decision your application can enforce.

Does a normal-looking request mean trusted?

No. Crytify evaluates multiple private categories before returning ALLOW, CHALLENGE, or BLOCK.

What does Crytify expose publicly?

Public responses expose decisions, scores, and broad reason categories. Internal checking logic is not exposed.

What are the protection modes?

Easy reduces friction, Medium balances protection, and Hard applies stricter policy for sensitive endpoints like login, checkout, admin, and APIs.

When are credits charged?

Credits are charged only after valid authentication, project authorization, valid JSON, required fields, valid IP format, and sufficient credit checks pass.