🛡️ Clicker defense-testing lab

Each click fires 10 requests at the target endpoint, every one with a random source IP and a rotating simulated proxy. Turn on defense layers one at a time and watch the bypass rate fall. Self-contained — traffic only hits this app's own /api/target.

Attacker

0sent
0bypassed
0blocked
0%bypass rate

Defense layers

Stack these until bypass rate hits 0%.

Live log