Beskar is a mountable Rails engine with database-coordinated authentication admission limits, risk-based account locks, persistent IP bans, scanner-path signatures, and an administrative security dashboard. It supports Devise and explicit Rails-native authentication integration, optional MaxMind enrichment, User-Agent risk heuristics, and monitor-only operation. It does not implement general SQL injection or XSS filtering, JavaScript challenges, or honeypots.