Forms — Veritus manual

A form in Veritus is a logical signup endpoint with its own UUID, custom thresholds, and optional origin pinning. Most customers have one form; you might create more if you protect multiple sites or want different thresholds for different signup pages (e.g. lax for newsletter, strict for paid trial).

Creating a form

Forms → New form:

Name — for your reference; not shown to your customers.
Origin URL — optional. If set, the JS widget only accepts requests from this exact origin. Highly recommended for production.
Allow threshold — max score that still gets allow. Default 30.
Review threshold — max score that gets review. Above this is block. Default 70.

Choose thresholds based on your tolerance for false positives. A higher allow threshold means fewer legitimate users get blocked; a lower one means stricter enforcement. The defaults work well for most cases.

Required fields

For each form you can declare which signup fields must be present for the verdict to be allow. If any required field is missing or empty at scoring time, the verdict is forced to review regardless of the score, with a MISSING_REQUIRED_FIELDS reason.

Use this when a thin payload can't be safely evaluated:

Email-only signup (e.g. dropcatch notifications) — require email; allow only well-known good emails through, review the rest
Account creation with billing — require email + country + postcode + address_line; partial signups go straight to the review queue
API consumers — require ip so country-mismatch checks can fire

Required-fields enforcement runs after normal scoring. A signup that would have scored 'block' still scores 'block' — this only prevents allow on incomplete data, it doesn't escalate block to review.

Form detail page

Click into any form to see:

Editable settings (name, origin, thresholds)
Copy-paste integration snippets for JS widget, curl, and Python
The last 25 scores attributed to this form

Deleting a form

Delete is permanent for the form record, but historical checks remain in your dashboard (they just stop being attributed to the deleted form). This means you can clean up old forms without losing audit trail.