Malicious bot abuse is growing in frequency, sophistication, and customer impact. The most common types of abuse include content scraping, fraudulent check-outs, and account takeover. Impacted companies can experience losses in customers and revenues, increases in operational costs, a damaged brand, and wasted marketing spend.
Websites and applications require the resilience and intelligence of a scalable network to combat malicious bot abuse. Protecting against threats should not degrade performance caused by security induced latencies, and security services must be easy to configure to eliminate misconfigurations, which introduce new vulnerabilities.
Shared Network Intelligence
With every new property, Cloudflare’s network becomes smarter. Cloudflare’s IP reputation database and predictive security identifies and blocks abusive bots across more than 7,000,000 properties on the network.
Custom WAF Rulesets
Cloudflare’s web application firewall (WAF) blocks bots from systematically attacking Internet properties using custom rulesets, by enforcing user agents, geolocation, session limiting, and more.
Granular Rate Limiting
Cloudflare Rate Limiting offers granular control to block malicious bots targeting specific endpoints. User-defined rulesets establish request thresholds, timeout periods, and response codes, allowing protection for websites and APIs.
The most common type of checkout fraud bot is known as “Sneakerbot”. This type of bot purchases online products that are limited in quantity. As a result, it reduces repeat customers, lowers average purchased amounts, and can even damage supplier relationships.
Key Results
Instant blocking
of bots through the flip of a switch, instead of hours of manual work.
15% fewer
customer service calls due to website unavailability.
10% savings
on monthly bandwidth and infrastructure costs.
Matthew Butch
Systems Engineering Manager at Villa
Cloudflare’s layered security approach combines multiple security practices into one service. It prevents disruptions caused by bad bots, while allowing the good bots, such as Google web crawlers through, keeping Internet assets highly available, protected, and performant.
Protect Internet applications and APIs from malicious traffic targeting network and application layers, to maintain availability and performance, while containing operating costs.
Prevent attackers from compromising sensitive customer data, such as user credentials, credit card information, and other personally identifiable information.
Cloudflare's Performance and Security Services work in conjunction to reduce latency of web sites, mobile applications, and APIs end-to-end, while protecting against DDoS attack, abusive bots, and data breach.
Cloudflare Performance Services improve conversions, reduce churn, and improve visitor experiences by accelerating web and mobile performance, while keeping applications available.
Cloudflare Security Services reduce the risk of lost customers, declining revenues, and degraded brand by protecting against DDoS attacks, abusive bots, and data breach.
