We have now introduced a feature to lockout agent and contact accounts if 5 consecutive invalid login attempts are made.

During a lockout, the account will be inaccessible for 60 mins, after which it is automatically released.

The agent or contact can also request the administrator to unlock their account. More info