jazzband/django-axes

Health v2 · maintenance only

Adoption not part of the score

1699 stars · 369 forks observed · 2026-10-18

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

django-axes is a Django plugin that tracks failed login attempts and blocks brute-force attacks on Django-powered sites. It supports monitoring by IP, username, and user agent, with database or cache-backed persistence, cool-off periods, and IP allow/block lists.

Use cases

• block brute-force login attacks on a Django site
• lock out users after too many failed login attempts
• rate limit authentication attempts by IP address
• allowlist or blocklist IP addresses for Django logins
• track suspicious login attempts in the database or cache
• meet PCI compliance requirements for login attempt monitoring

When to choose

• you run a Django site and need brute-force protection out of the box
• you want configurable lockouts by IP, username, or user agent
• you need PCI-compliant login attempt tracking
• you want a mature, well-documented Django security plugin

When to avoid

• your project is not built on Django
• you need full WAF or DDoS protection rather than login-level throttling
• you use a non-relational stack without Django's ORM or cache framework

Facets

plugin · maturity stable

auth security rate-limiting middleware security web-development backend developer-tools python self-hosted django brute-force-protection login-attempt-tracking jazzband access-management web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jazzband/django-axes")