In reply to Matt.

Matt, IMHO the biggest challenge with BP is how false positives are being handled. With all due respect to comments, losing one because of a false positive is usually not a big deal, but getting yourself lock out of your site because of a false positive can raise a nasty "OMG someone hacked my site" moment.