Protection Against Brute-Force Attacks in Dynatrace: Login Attempt Limits

[Beshir]

Does Dynatrace protect against brute-force attacks by restricting the maximum number of login attempts allowed for an account?

[AntonPineiro]

Hi,

Have you check Runtime Application Protection?

Best regards

[Beshir]

Thank you @AntonPineiro for your response and the provided link. However, my inquiry is specifically about the Dynatrace portal login security rather than application runtime security.

Could you please confirm whether Dynatrace has built-in protection against brute-force attacks for the Dynatrace account login, such as limiting the maximum number of failed login attempts before locking an account ?

I appreciate your clarification on this

[AntonPineiro]

Hi,

Not sure if that is documented. I would raise a support ticket about it.

Best regards

[AntonioSousa]

@Beshir,

Normally, that type of information is not publicly disclosed, as it gives information to the attacker. I have never seen any reference to it in Dynatrace documents and information. As @AntonPineiro said, a ticket might be the best way to get this information, if you really need it.

In the meantime, regarding passwords, there is some info here:
https://docs.dynatrace.com/docs/manage/identity-access-management/user-and-group-management/access-u...