Edge-based abuse blocking
Run Castle at the edge to inspect requests before they reach your backend, helping you block credential stuffing and scripted abuse earlier in the flow.
Castle
ReclamarCastle is a fraud and abuse prevention platform to block bots, monitor users, and stop in-app fraud with SDKs, APIs, and real-time policy actions.
Overview
Castle is a fraud and abuse prevention platform for blocking bots, account abuse, and in-app fraud. The site describes it as a complete suite of SDKs and APIs that can be deployed at the edge and inside the app to monitor users and stop abuse in real time.
Its workflow is designed to start in monitoring mode and then move to blocking when teams are ready. The platform supports edge analysis of requests, in-app session and device tracking, and policy actions such as allow, challenge, or deny for events like fake signups, account takeovers, credential stuffing, and multi-accounting.
Features
In-app monitoring SDK
Add the SDK to track sessions, devices, and behavior inside the application, with the option to enrich decisions using your own business context.
Risk scoring and signals
Use built-in scores and signals such as Bot Score, Abuse Score, ATO Score, fingerprinting, IP geolocation, VPN detection, and device integrity checks to inform decisions.
Rules and response automation
Create real-time allow, challenge, and deny policies with rules, lists, webhooks, and Slack alerts, without needing code changes for every adjustment.
Analytics and threat hunting
Query, visualize, and backtest historical data with pattern exploration, network analysis, and session monitoring to investigate abuse and refine rules.
Case and state management
Manage trusted, blocked, and review states for users, devices, emails, IPs, or custom attributes with case and state management tools.
Use Cases
Bot blocking at the edge
Use Castle to detect and block automated requests before they reach the backend, especially for credential stuffing and scripted abuse patterns.
In-app fraud monitoring
Track sessions, devices, and behavior inside the product to catch suspicious activity such as fake signups, account takeovers, and coordinated abuse.
Multi-accounting prevention
Apply device, IP, email, and velocity rules to limit users who create multiple accounts from the same signals or shared infrastructure.
Abuse investigation and rule tuning
Query historical events, shared signals, and user paths to uncover fraud rings and decide which users, devices, or IPs should be blocked or reviewed.
Gradual rollout of enforcement
Start in monitoring mode, then switch policies to challenge or deny when the risk signals are strong enough to act automatically.
Pros and Cons
Pros
- Combines edge and in-app defenses in one system.
- Supports real-time decisions such as allow, challenge, and deny.
- Includes analytics tools for historical investigation and rule testing.
- Offers transparent self-serve pricing alongside an Enterprise option.
- Provides multiple signal types, including fingerprints, scores, and device checks.
Cons
- The public pages shown do not spell out all supported integrations or deployment targets in detail.
- Pricing and enterprise terms are partly custom, so some cost and support details require direct contact.
FAQ
How is API usage measured?
Castle measures API usage in API calls. Each successful request to one of Castle’s APIs counts as one call, and the dashboard shows usage in real time.
Can I change my plan later?
Yes. Plans can be upgraded or downgraded at any time through billing settings.
Do you provide Service Level Agreements (SLAs)?
Yes. Enterprise customers can receive SLAs, and the SLA terms can be customized to fit business requirements.
Do you offer help with setup and integration?
Yes. Dedicated setup and integration support is available on the Enterprise plan.
Do unused API calls roll over to the next month?
No. Unused API calls do not roll over; usage resets at the start of each billing cycle.
Quick Facts
- Category
- Fraud prevention platform
- Primary use
- Bots, account abuse, and in-app fraud
- Deployment
- Edge and in-app
- Pricing
- Free, Pro, and Enterprise plans
- Website
- castle.io