---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/api/errors/59202#article
headline: "59202: Security Guardrail Violation"
url: https://www.twilio.com/docs/api/errors/59202
inLanguage: en
dateModified: 2026-08-18T11:08:51.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# 59202: Security Guardrail Violation

Log Type: APPLICATION

Log Level: ERROR

## Description

The requested `Rule` or `Setting` configuration was rejected because it would violate a security policy enforced by the Webhooks Configuration API. This error is returned when creating or updating a `Rule`.

### Possible causes

* The default (catch-all) `Rule` — the one with no `matchType`/`value` restricting it to a specific URL pattern — was configured to use Basic Authentication. Because a default rule matches every unmatched webhook URL, Basic Authentication credentials on it would be sent broadly, risking credential exposure.

### Possible solutions

* If Basic Authentication is required, scope it to a more specific `Rule` (an `EXACT_MATCH` or prefix match) rather than the default rule.
* Use OAuth 2.0 or Digest authentication on the default `Rule` instead of Basic Authentication.