Build.com Stops Account Takeover Attacks

Build.com had been experiencing automated bots scraping their product data, but they considered it an inevitable part of being an online business. Soon however, the attacks grew in sophistication. Bots not only continued to scrape the site, but also targeted login pages with credential stuffing and account takeover attacks. These attacks were distributed in nature and mimicked real user traffic, with a large amount of unique IPs and high volume of requests coming from each IP. Customers couldn’t log in because Build.com’s login service was overwhelmed. It was clear that the company’s firewalls and other traditional web security controls weren’t sufficient to block more advanced bad bots.

The team chose HUMAN Application Protection for the following capabilities:

• Advanced machine learning and behavioral analysis: Application Protection takes a behavior-based approach to not only identify automated traffic, but distinguish good bots from bad.
• Easy integrations: Application Protection seamlessly integrated with Build.com’s existing tech stack, including Fastly. There were no changes required or disruptions to performance.
• Low latency: Application Protection blocks bots at the edge to improve latency and website performance. The solution stops sophisticated bot attacks without impacting user experience.