---
title: 'New anomaly signal: INSECURE-AUTH'
summary: null
url: >-
  https://www.fastly.com/documentation/reference/changes/2024/08/new-anomaly-signal-insecure-auth
---


We have introduced an anomaly signal (INSECURE-AUTH) that allows you to detect when insecure authentication methods are used (such as the [JSON Web Tokens](https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/06-Session_Management_Testing/10-Testing_JSON_Web_Tokens) with the None Algorithm). Want to learn more? For full descriptions of this and all other system signals, check out our [system signals documentation](/guides/next-gen-waf/signals/using-system-signals).