ASVS-V6.1.1 Application documentation defines how controls such as rate limiting, anti-automation, and adaptive response, are used to defend against…

Verify that application documentation defines how controls such as rate limiting, anti-automation, and adaptive response, are used to defend against attacks such as credential stuffing and password brute force. The documentation must make clear how these controls are configured and prevent malicious account lockout.