Choosing fail-open or fail-closed

No service is up 100% of the time, so decide in advance what should happen if Veritus cannot be reached.

• Fail-open (the widget default, data-on-fail="allow") lets the signup through if the check cannot complete. You never turn away real customers because of a hiccup, at the cost of briefly losing protection.
• Fail-closed (data-on-fail="block" or review) holds or blocks signups until scoring is available. Choose this where the cost of one fraudulent account outweighs the friction.

Server-side, you make the same choice in your own code by deciding how to treat a failed or timed-out API call. Most customers run fail-open on public marketing signups and fail-closed on higher-value flows.