Castle

Castle is a fraud and abuse prevention platform to block bots, monitor users, and stop in-app fraud with SDKs, APIs, and real-time policy actions.

Monitoring & Logging

Website Besuchen

Overview

Castle is a fraud and abuse prevention platform for blocking bots, account abuse, and in-app fraud. The site describes it as a complete suite of SDKs and APIs that can be deployed at the edge and inside the app to monitor users and stop abuse in real time.

Its workflow is designed to start in monitoring mode and then move to blocking when teams are ready. The platform supports edge analysis of requests, in-app session and device tracking, and policy actions such as allow, challenge, or deny for events like fake signups, account takeovers, credential stuffing, and multi-accounting.

Features

Edge-based abuse blocking

Run Castle at the edge to inspect requests before they reach your backend, helping you block credential stuffing and scripted abuse earlier in the flow.

In-app monitoring SDK

Add the SDK to track sessions, devices, and behavior inside the application, with the option to enrich decisions using your own business context.

Risk scoring and signals

Use built-in scores and signals such as Bot Score, Abuse Score, ATO Score, fingerprinting, IP geolocation, VPN detection, and device integrity checks to inform decisions.

Rules and response automation

Create real-time allow, challenge, and deny policies with rules, lists, webhooks, and Slack alerts, without needing code changes for every adjustment.

Analytics and threat hunting

Query, visualize, and backtest historical data with pattern exploration, network analysis, and session monitoring to investigate abuse and refine rules.

Case and state management

Manage trusted, blocked, and review states for users, devices, emails, IPs, or custom attributes with case and state management tools.

Use Cases

Bot blocking at the edge
Use Castle to detect and block automated requests before they reach the backend, especially for credential stuffing and scripted abuse patterns.
In-app fraud monitoring
Track sessions, devices, and behavior inside the product to catch suspicious activity such as fake signups, account takeovers, and coordinated abuse.
Multi-accounting prevention
Apply device, IP, email, and velocity rules to limit users who create multiple accounts from the same signals or shared infrastructure.
Abuse investigation and rule tuning
Query historical events, shared signals, and user paths to uncover fraud rings and decide which users, devices, or IPs should be blocked or reviewed.
Gradual rollout of enforcement
Start in monitoring mode, then switch policies to challenge or deny when the risk signals are strong enough to act automatically.

Pros and Cons

Pros

Combines edge and in-app defenses in one system.
Supports real-time decisions such as allow, challenge, and deny.
Includes analytics tools for historical investigation and rule testing.
Offers transparent self-serve pricing alongside an Enterprise option.
Provides multiple signal types, including fingerprints, scores, and device checks.

Cons

The public pages shown do not spell out all supported integrations or deployment targets in detail.
Pricing and enterprise terms are partly custom, so some cost and support details require direct contact.

FAQ

How is API usage measured?

Castle measures API usage in API calls. Each successful request to one of Castle’s APIs counts as one call, and the dashboard shows usage in real time.

Can I change my plan later?

Yes. Plans can be upgraded or downgraded at any time through billing settings.

Do you provide Service Level Agreements (SLAs)?

Yes. Enterprise customers can receive SLAs, and the SLA terms can be customized to fit business requirements.

Do you offer help with setup and integration?

Yes. Dedicated setup and integration support is available on the Enterprise plan.

Do unused API calls roll over to the next month?

No. Unused API calls do not roll over; usage resets at the start of each billing cycle.

Quick Facts

Category: Fraud prevention platform
Primary use: Bots, account abuse, and in-app fraud
Deployment: Edge and in-app
Pricing: Free, Pro, and Enterprise plans
Website: castle.io