Know when you're under attack before your users do