General Enforcer Information

The HUMAN Enforcer is a lightweight SDK responsible for the enforcement functionality of HUMAN products, including Bot Defender & Code Defender.

For each activity on the HUMAN Enforcer, an async request is sent to the HUMAN Detector. The HUMAN Detector in turn sends a command to the HUMAN Enforcer via a cookie, or as a synchronous s2s request if a cookie is not present (and in other cases such as if the cookie expired, cookie validation/decryption failed, sensitive route, etc.) as to the appropriate course of action (allow, block, challenge, etc.).

The Enforcer SDK is integrated within your web application. On each request it decrypts HUMAN cookie that is injected by the HUMAN Sensor. The encrypted cookie contains the Risk Score. According to that score the Enforcer decides whether to block or allow the request. If the cookie is missing or if it is invalid / expired, The Enforcer will send a synchronous request with relevant data to the HUMAN Detector. In return, it will get a risk score, and will enforce the request accordingly.