Product capabilities

Operating ML Risk Scoring in a Routing Flow

An ML risk score summarizes observed request evidence; the routing policy still decides what each score range means operationally.

Treat the score as evidence, not identity

A score estimates similarity to patterns represented in a model and its features. It does not prove that a visitor is fraudulent, automated, affiliated with a platform, or acting with a particular intention.

Understand the contributing feature families

Network context, browser characteristics, request headers, source labels, geography, and recent activity can influence classification. Operators need enough reason detail to distinguish a changed traffic mix from a model or integration defect.

Map score bands to explicit outcomes

Define which range selects the Target Page, which range uses a conservative result, and whether any middle band receives additional review. Choose thresholds from labeled campaign evidence rather than copying an arbitrary setting across unrelated sources.

Keep deterministic boundaries visible

Verified allowlists, denied infrastructure, required markets, and other hard constraints may sit before or after scoring according to policy. Document precedence so an operator can explain what happens when a manual rule conflicts with the model.

Watch for drift after deployment

Compare score and reason distributions over time by flow, source, device, country, and outcome. Revalidate representative fixtures after model, feature, tracking, or campaign changes, and investigate shifts before compensating with a global threshold.

Related guides