When a visitor's trust score drops into the low-trust band — below your low-trust line but above your block line — Yaplet flags them as low trust. They can still chat, and Yaplet does not push you to make a decision: there's too little signal to act on confidently, so this is awareness only. Whenever you want to take a closer look, filter the Visitors list for low-trust visitors and decide whether to allow or block them.
Find low-trust visitors
Go to Security → Visitors, open Filters → Status → Low trust. The list shows everyone in the low-trust band, sorted lowest score first so the riskiest visitors are at the top. It only covers the last 30 days — someone who has not been seen since then is left out until you widen the date picker above the table. There's no separate review queue and no banner to work through; it's just a filter on your normal Visitors list.
What you see
Each row shows:
- Trust — the visitor's current score, colour-coded (red = high risk)
- Visitor — name or email if known
- Location / IP — country and most recent IP address
- Widget — which widget the visitor used
- Signals — how many risk signals fired, plus the top one (hover for each one's impact)
- Last seen — when they were last active
- View — open the visitor's profile
Allow a visitor
Open the visitor's profile and click Allow. This is a permanent exemption: the visitor is never auto-blocked again, even if their score stays low. Use this when you've reviewed the signals and decided the visitor is legitimate — a remote employee, a frequent traveller, and so on.
Block a visitor
On the profile, click Block. It takes effect with a single click — no confirmation. Blocking applies org-wide and also blocks inbound voice calls. See Block a visitor for what blocking does.
Investigate before deciding
Open the visitor's profile for the full picture before you act. There you'll find:
- Every risk signal that fired, with the context that triggered it and timestamps
- The score breakdown — how each signal raised or lowered the score from the baseline of 50
- The visitor's device, IP and location, plus all known IPs and devices
- Other visitors who share the same device or IP
- Recent sessions and an event timeline
Work through several at once
Select multiple rows with the checkboxes to Allow, Block, or Clear status in bulk (up to 200 at a time). Bulk Block asks for confirmation first.
Already-blocked visitors
Visitors you've already blocked don't appear here — they live on the Blocked page, where you can review them and clear the block if you change your mind.
Adjust your protection level
If the low-trust band is consistently too crowded (too many false positives) or too empty (missing real threats), change where the lines sit. Go to Security → Policy. Moving the low-trust line up flags more visitors; moving it down is more selective. See Tune your security policy.