Protect the first app, then verify real traffic.
Create a workspace, connect a site key, add server-side token checks, and watch MANDATE score register/login traffic before enforcement.
Observe mode first Local backend verification No CAPTCHA workflow Policy review before blocking
Create workspace
Create the account, then come back to MANDATE to connect the first protected app.
Continue Sign in insteadAfter signup, you'll return to the MANDATE dashboard.