Demo lab

Traffic generators that fire from your browser at this site only. Use them to make Security Events, rate limiting, and cache analytics move while the panel watches.

Credential stuffing

25 rapid POST /api/login attempts with leaked-style passwords.

Checkout abuse

15 rapid POST /api/checkout calls — card-testing pattern.

SQL injection probe

Classic payloads against /search?q=. Managed Rules should return 403.

XSS probe

Reflected script payloads against the search endpoint.

Catalog scraping

40 sequential product API reads — the pattern Bot Management scores.

Cache warm-up

Requests every catalog page twice and reports hit ratio.

Results

Idle. Every run is scoped to this hostname.