Application-level security guard: scoring-based detection of brute force, enumeration and probing before requests reach your controllers.