Cybersecurity Bot Resistance

Biometric MFA Challenge

A suspicious login is challenged and an AI agent is blocked because it cannot complete biometric verification.

Scenario

A login attempt scores as suspicious. Daltrey requests a biometric challenge. The automated agent cannot satisfy the liveness requirement, so access is denied until the real user takes over.

Security · Suspicious login

Verification required Login flagged as high-risk

Account user@acme.example
Signal Impossible travel + automation
Requirement Biometric liveness challenge
Automated agent detected — biometric challenge issued

You'll be redirected to Daltrey to enter your email, which triggers the login approval and face scan on your Daltrey mobile app. The code → token exchange happens on the server (confidential client + PKCE) — the browser never sees the secret or the raw tokens.

Why this matters

Security without clumsy friction

Daltrey turns identity proof into a reusable control surface — strong enough for regulated environments, fast enough for real users, and visible enough for executive buyers.