A client request originating from a client device and destined for a server via a network is intercepted. The server is configured to perform a service in response to the client request. A determination is made of whether the request action and the request resource of the client request matches a pattern action and a pattern resource of a pattern in a rule. Based on a determination there is a match, a determination is made of whether a threshold trigger condition in the rule is satisfied based. In response to the threshold trigger condition being satisfied, a determination is made of whether a reset condition in the rule is not satisfied. In response to the reset condition not being satisfied, at least one rule action associated with the pattern is performed, wherein performing the at least one rule action comprises returning an errored response back to the client device.