# Protect plans

Every Clerk application includes a baseline set of Protect protections at no extra cost. The Business plan includes stronger [system protections](https://clerk.com/docs/guides/protect/system-protections/overview.md) that you can turn on and configure for your application.

## Included with every plan

All Clerk applications include:

- **System protections**: [Challenge suspicious sign-ups](https://clerk.com/docs/guides/protect/bot-protection.md), [Require Device Intelligence checks](https://clerk.com/docs/guides/protect/system-protections/require-device-intelligence.md), [Lock accounts after failed sign-ins](https://clerk.com/docs/guides/protect/user-lockout.md), [Device Trust](https://clerk.com/docs/guides/protect/device-trust.md), [User enumeration protection](https://clerk.com/docs/guides/protect/user-enumeration-protection.md), [Block email subaddresses](https://clerk.com/docs/guides/protect/system-protections/block-email-subaddresses.md), and [Block disposable email addresses](https://clerk.com/docs/guides/protect/system-protections/block-disposable-email-addresses.md).
- **[Device Intelligence](https://clerk.com/docs/guides/protect/device-intelligence.md)**: background browser checks that **Require Device Intelligence checks** uses.
- **Decision logs**: Protect's blocks and challenges appear as [Protect events](https://clerk.com/docs/guides/dashboard/logs/application-logs.md#protect-events) in your application logs. How long they're kept depends on your plan — see [log retention](https://clerk.com/docs/guides/dashboard/logs/overview.md#plans-and-retention).

## Included in the Business plan

Applications on the [Business plan](https://clerk.com/pricing) can turn on these system protections, which go further than the baseline:

- [Block sign-ups from suspicious network types](https://clerk.com/docs/guides/protect/system-protections/block-suspicious-network-types.md)
- [Challenge residential proxies](https://clerk.com/docs/guides/protect/system-protections/challenge-residential-proxies.md)
- [Block sign-ups by country](https://clerk.com/docs/guides/protect/system-protections/block-sign-ups-by-country.md)
- [Limit sign-ups per IP address](https://clerk.com/docs/guides/protect/system-protections/limit-sign-ups-per-ip-address.md)
- [Block risky email domains](https://clerk.com/docs/guides/protect/system-protections/block-risky-email-domains.md)

The Business plan also lets you change the **Challenge** setting of [Challenge suspicious sign-ups](https://clerk.com/docs/guides/protect/bot-protection.md). Other plans use its default, **Suspicious sign-ups**.

See [System protections](https://clerk.com/docs/guides/protect/system-protections/overview.md) for how each one works.

As with all paid Clerk features, these protections are free to use on development instances, so you can try out what works for your application before upgrading. See [Development and production instances](https://clerk.com/docs/guides/development/managing-environments.md).

---

## Sitemap

[Overview of all docs pages](https://clerk.com/docs/llms.txt)