Joget allows administrators to lock the accounts. The account lockout policy disables a user account if an incorrect password is entered a specified number of times.. These settings prevent attackers from guessing users passwords, thus preventing attacks.
To activate these settings, go to System Settings > Directory Manager Settings > Configure Plugin (Security Enhanced Directory Manager)