Risk Levels

Risk-Based Authentication

JFW provides Risk-Based Authentication (RBA) to assess and manage risk levels during user login attempts. This helps prevent unauthorized access by detecting suspicious activities based on:

✔ Unusual login locations ✔ New devices or browsers ✔ Multiple failed login attempts ✔ High-risk IP addresses (e.g., Tor, VPNs, or blacklisted regions)

Risk Level is calculated from 0 to 100; 0 is the best; 100 is too risky.

JFW assigns a Risk Level to each login attempt:

Risk Level	Description
Low: 0-50	Login from a trusted device, IP, and location
Medium: 51-70	Login from a new device, unusual location, or multiple failed attempts
High: 81-100	Login from a blacklisted IP, detected bot, or suspicious activity

📌 High-risk logins can be blocked or require extra authentication (MFA).

Risk-Based Payment

Similar to risk-based authentication, we also need to focus on payment issues.