What is rate limiting?

Updated May 6, 2026

Short answer

Rate limiting controls request frequency to prevent abuse.

Deep explanation

It mitigates brute force and DDoS by limiting requests per user/IP.

Real-world example

Login attempt throttling.

Common mistakes

  • Only rate limiting at frontend.

Follow-up questions

  • What algorithms are used?
  • Difference from throttling?

More Web Security interview questions

View all →