Usage Guard (Coming Soon)

The Usage Control policy protects GenAI applications from excessive resource consumption by enforcing limits on request frequency and request size. This helps mitigate abusive usage patterns, including prompt flooding, excessive token consumption, and AI Denial-of-Service (AI DoS) attempts.

To configure Usage Control:

1. Navigate to the Usage Control practice.

2. Select the enforcement Mode:

   • Detect – Log violations without blocking requests.

   • Prevent – Block requests that exceed the configured limits.

3. Add one or more rules:

   • Rate – Limit the number of requests allowed within a specified time window.

   • Size – Limit the maximum request payload size.

4. (Optional) Configure additional conditions to scope the rule to specific applications or traffic.

5. Save and publish the policy.

Match priority

A request is enforced against a single matched rule per limit type.

• Rate — Rate rules are enforced by the CloudGuard WAF Rate Limit engine. For how it matches requests and resolves overlapping rules, see the Rate Limit documentation.

• Size — A rule set to Prevent takes precedence and blocks immediately; otherwise (Detect) the exceeded rule with the smallest (strictest) limit is the one reported. AI Guard emits at most one size event per direction (so up to two per transaction — request and response).

For more information regarding Rate Limit configurartion read the dedicated page - here.