Rate Limiting

Rate limiting restricts how many requests an account, device, or network source can make during a defined period. A website may use it to reduce repeated login attempts, automated form submissions, or excessive API traffic. For a small service business, reasonable limits can help protect public inquiry forms without unnecessarily blocking genuine customers. Rate limiting is narrower than a web application firewall, which can apply a broader range of rules to requests. The correct threshold depends on typical traffic, shared connections, and the action being protected. It is one defensive layer, not a complete answer to bot abuse, denial-of-service attacks, or fraudulent messages.