What does the Security signals page watch?

This is the raw record of anything the platform's own rules flagged as worth a second look: a login that failed too many times, a scan denied because the person or device wasn't recognized, a request throttled for coming too fast. Live signals shows what the rules see right now; History keeps everything already acknowledged or resolved.

An open alert stays open until an admin acknowledges it — nothing clears itself quietly in the background. Acknowledging one is a record too: who looked at it and when.

This is a different screen from the location-proof threshold under Organization → Security, which decides whether a GPS fix is required at a location rather than watching for suspicious activity across the whole account.