Systems and methods are provided for data security. A server system provides data security using one or more processor devices, one or more communication interfaces, and one or more memory devices including computer-executable instructions. Those instructions case the one or more processor devices to: monitor one or more requests or activities of a computing device and compare the monitored one or more requests or activities with a database of predetermined characteristics to determine whether the monitored one or more requests or activities indicates that the computing device (i) accessed or attempted to access sequentially more than A data files or objects in less than a predetermined period of time, where A is a positive integer greater than two, and (ii) downloaded X data files or objects, where X is a positive integer greater than two. The monitored one or more requests or activities is determined suspicious when the comparing determines that (i) and (ii) are true, which causes a response to hinder the monitored one or more requests or activities.