06/30/2025
Allowlists rely on a faulty assumption: activity from an unusual location is likely an attack.
Remote work and frequent travel makes it hard to say “someone shouldn’t be in this location”.
Instead of treating unusual location as a silver bullet to detect attacks, you should treat it as one signal among many.
Read our newest research →
“Only allow log‑ins from known places” sounds great, but falls apart in practice.