My impression from the page is that they send you a code specific to a threat (or whatever they end up calling them) when it happens, then you make a decision to add it to your site or not. Rather than dropping in a code and letting them add banners and blackouts whenever they please.