Stop bulk lockouts before they reach your directory.

SCORPION protect sits between your clients and your real directory server (AD, OpenLDAP, 389 DS). Every ordinary request passes through byte-for-byte, untouched — but a runaway script or an over-eager AI agent trying to lock, delete, or reset thousands of accounts hits a configurable blast-radius policy first, and never reaches the directory at all.