Skip to main content

Configuration

All plugin controls are in:

  • Settings -> Suma Security

Option Keys​

  • suma_security_velocity_block_threshold
  • suma_security_payment_lockout_duration
  • suma_security_require_device_token
  • suma_security_enable_second_failure_email
  • suma_security_otp_failed_attempt_threshold

Settings Reference​

Checkout Attempts Before Block​

  • Option: suma_security_velocity_block_threshold
  • Type: integer
  • Default: 12
  • UI min/max: 1 to 100

Defines weighted velocity score threshold that triggers lock.

Checkout Lock Duration (Seconds)​

  • Option: suma_security_payment_lockout_duration
  • Type: integer
  • Default: 1800
  • UI min/max: 60 to 86400

Duration for velocity lock state.

  • Option: suma_security_require_device_token
  • Type: boolean-like string (1 or 0)
  • Default: enabled

When enabled, checkout gate validates device token.

Require 6-Digit Email Code Before Checkout​

  • Option: suma_security_enable_second_failure_email
  • Type: boolean-like string (1 or 0)
  • Default: enabled

Enables OTP verification lock flow.

Failed Payment Attempts Before OTP Is Required​

  • Option: suma_security_otp_failed_attempt_threshold
  • Type: integer
  • Default: 2
  • UI min/max: 1 to 20

When failed count reaches threshold, OTP lock is activated.

  • Keep device token validation enabled.
  • Keep OTP verification enabled.
  • Start OTP threshold at 2.
  • Keep velocity threshold at 12 unless false positives are observed.
  • Review lock rows in Tools page after launch to tune values.