This may currently open a site up to a brute force attacks

https://simplytest.me/project/site_guardian/1.0.x?patch[]=https://git.dr...

I'll test the MR, thanks @the_g_bomb

I tried this out myself and looks good. Hitting an incorrect endpoint 10 times means even if the 11th attempt is correct, you still get 'Access denied'. Conversely, alternating correct and incorrect endpoints doesn't activate Flood even after 10 incorrect attempts (ie// 20 attempts altogether), which is as it should be - it's only 10 incorrect ones in a row in a short space of time that would be suspicious/problematic. All of this is corroborated in the logs. Cheers @the_g_bomb.

How did you get on with your testing @i-trokhanenko? Please let us know and I will look at merging.

It seems to work well for me as well. Tested locally using Drupal 9.5.9. Thank you @the_g_bomb.
We may need to mention this feature in the README.md file.

Automatically closed - issue fixed for 2 weeks with no activity.