Great to hear 3 of our protections were useful:
-
Invader couldn’t get backups because of the needed email flow
-
Invader couldn’t get admin on a email that he controls because there is emails to confirm to both addresses
-
Warning emails when login happens from far away
One thing that you should check is if Discourse is running the most recent version so it’s patched against any know vulnerabilities.