I’ve open-sourced Sprisk Engine, a Java library that adds real-time risk analysis to Spring Boot applications. It monitors login and transaction requests to automatically detect suspicious behavior — like multiple failed login attempts or high request velocity from the same IP. The engine is configuration-driven, so you can adjust thresholds and actions without touching your code, and even define your own custom rules in just a few steps.

You can find the example app, integration guide, and documentation here: https://github.com/SahinEmirhan/sprisk-engine