Mitigations - Esper Docs

List mitigations

esper mitigation list

Create mitigation

esper mitigation create \
  --name "Monitor Login" \
  --description "Observe matching login traffic." \
  --mode Monitor

esper mitigation create \
  --name "Hard Block Login" \
  --description "Block matching login traffic locally." \
  --mode Block \
  --block-mode Hard

This writes data files under ~/.esper/data/mitigations/. Mode-specific flags are validated before the CLI calls the API.

Update mitigation

esper mitigation update --file ./mitigation-v2.json

Mitigation updates apply to new evaluations only. Active mitigations continue with their original configuration.

Delete mitigation

esper mitigation delete <mitigation-id>