Identifies unusual patterns indicative of malicious activity based on session data.

By defining a policy, you can set a target, combine multiple detectors, and fine-tune.

policy = {
  "id": "suspicious-session",
  "definition": "suspicious-session policy example",
  "target": "user",
  "override_response": "Ops, sorry!",
  "detectors": [
    {
      "expected": "blocked",
      "model": "suspicious-session",
      "threshold": 0.5
    }
  ]
};

payload = {
  "message": messages,
  "policies": [policy],
  "enabled_policies": ["suspicious-session"]
};