Fight back against fraud

Clerk Protect stops bots, fake accounts, and account takeovers directly inside your sign-up and sign-in flows.

Battle-tested on 100,000 apps,
built into your auth flows.

01Bots and automation
Separate scripted traffic from real interactions using bot, network, and device signals.
02Spam sign-ups
Catch disposable identifiers, unusual velocity, and patterns associated with fake accounts.
03Account takeovers
Verify sign-ins from new devices and hide which emails and phone numbers have accounts.
04Residential proxies
Challenge sophisticated attacks hiding behind residential proxies using device and behavior signals.

ProtectionStatus

Block disposable email addressesBlocks email addresses from known disposable domains, at sign-up or when added to an account.

Inactive

Block email subaddressesBlocks variations of a registered email address, like name+tag@example.com, at sign-up or when added to an account.

Inactive

Bot sign-up protectionLegacyNew sign-ups will include a browser verification step powered by Cloudflare Turnstile

Active

Device TrustRecommendedAsks for a second factor when someone signs in with a password on a new device.

Active

Lock accounts after failed sign-insLocks an account after repeated failed sign-ins, for a set time or until you unlock it.

Active

Prevent user enumerationBulkMakes it harder for attackers to find out which email addresses and phone numbers have an account.

Active

Require Device Intelligence checksBlocks browser sign-ups that don't pass a Device Intelligence check.

Setup required

Available on Business

Block risky email domainsBlocks sign-ups from email domains Clerk rates as risky, at the protection level you choose.

Setup required

Block sign-ups by countryBlocks sign-ups by country, using a blocklist or an allowlist.

Setup required

Block sign-ups from suspicious network typesBlocks sign-ups from the network types you choose, like VPNs, proxies, and data centers.

Setup required

Challenge residential proxiesChallenges sign-ups from known residential proxies and from IP addresses used as a proxy recently.

Setup required

Limit sign-ups per IP addressBlocks sign-ups from an IP address when it exceeds your hourly limit.

Setup required

Protect sees the whole user, not just a single request

You need more than a WAF. Protect knows your users' devices and history, and adapts as attacks evolve.

Pricing

/mo

10,000 free per month, then $0.002 per check

Protection checks10,000

10,000 free per month
Then $0.002 per check, with volume pricing above 1M
Protection tuning
Sensitivity, enforcement behavior, and challenge or block actions
Custom RulesComing soon
App-specific conditions, actions, and multi-key rate limits
Rule replay to preview a rule against previous trafficComing soon
Bypass lists for known-good usersComing soon

Included with your plan

Free

Basic protections
Captcha challenges, device checks, and more
Brute force prevention
On by default, always free
Block subaddresses and disposable email domains
Device trust and enumeration protection
Advanced protectionsBusiness plan
Rate limits, network-type blocks, country restrictions, and more

EnterpriseProtection at your scalewith volume pricing, custom contracts, and rollout help.

Pricing shown is temporary and subject to change.

Keep abuse outside the front door

Ready to configure Clerk Protect? Read the docs or talk with our team about rollout and pricing.

View docs Talk to sales

Fight back against fraud

Battle-tested on 100,000 apps,built into your auth flows.

01Bots and automation

02Spam sign-ups

03Account takeovers

04Residential proxies

Protect sees the whole user, not just a single request

Pricing

Keep abuse outside the front door

Battle-tested on 100,000 apps,
built into your auth flows.