Magebean Logo Magebean
← Back to Baseline

MB-R312

HUMAN VERIFICATION REQUIRED ASVS 6.6.4 Push-bombing defense

MB-C18 ASVS Level 3 Human Assurance High

Where push notifications are used for multi-factor authentication, rate limiting is used to prevent push bombing attacks. Number matching may also mitigate this risk.