Is there a lockout process for user accounts?

Is there a lockout process?

Failed login attempts to Alloy are configured to back-off exponentially based on the number of failed logins thus ensuring brute force password cracking is not possible in any timely manner.