Protect plans

Every Clerk application includes a baseline set of Protect protections at no extra cost. The Business plan includes stronger system protections that you can turn on and configure for your application.

Included with every plan

All Clerk applications include:

• System protections: Challenge suspicious sign-ups, Require Device Intelligence checks, Lock accounts after failed sign-ins, Device Trust, User enumeration protection, Block email subaddresses, and Block disposable email addresses.
• Device Intelligence: background browser checks that Require Device Intelligence checks uses.
• Decision logs: Protect's blocks and challenges appear as Protect events in your application logs. How long they're kept depends on your plan — see log retention.

Included in the Business plan

Applications on the Business plan can turn on these system protections, which go further than the baseline:

• Block sign-ups from suspicious network types
• Challenge residential proxies
• Block sign-ups by country
• Limit sign-ups per IP address
• Block risky email domains

The Business plan also lets you change the Challenge setting of Challenge suspicious sign-ups. Other plans use its default, Suspicious sign-ups.

See System protections for how each one works.

As with all paid Clerk features, these protections are free to use on development instances, so you can try out what works for your application before upgrading. See Development and production instances.