The SiteGenesis application rate limiting feature tracks the number of failures for specific functions taking place within a session, for example, login, gift card balance, and order tracking access attempts. When SiteGenesis pipelines (and controllers) are called too many times in a session, a CAPTCHA appears that requires human intervention, and slows down any brute force attack.
Schedule the retry value in Business Manager.