Shape Security Shape Defense

World Class Protection for Everyone

Designed to meet the needs of a broad range of organizations, Shape Defense delivers world-class application protection that leverages the power of the Shape network.

UNRIVALED ACCURACY Through advanced AI and ML, Shape Defense accurately detects and mitigates fraudulent and unwanted traffic in real-time, while allowing legitimate human users without introducing additional friction. NETWORK LEVERAGE Every 24 hours, Shape blocks more than two billion fraudulent log-in attempts and other transactions, while ensuring that more than 200 million legitimate human transactions are kept safe. OMNICHANNEL PROTECTION Shape Defense can be deployed to protect web and mobile applications, as well as HTTP APIs. The company’s mobile SDK is deployed on more than 200 million iOS and Android devices worldwide. EASY TO DEPLOY AND FLEXIBLE TO IMPLEMENT Shape Defense can be implemented in a variety of modes, including deployments as quick as 30 minutes. And Shape Defense is managed through simplified administration that does not require security expertise on staff.

Protection Against Bots and Other Automated Attacks

Shape Defense protects against the most sophisticated credential stuffing and account take over attacks, carding, and the rest of the OWASP Automated Threats to Web Applications list. And Shape Defense protects against attacker retooling, delivering persistent protection.

ACCOUNT TAKEOVER Stops fraudsters from rapidly testing stolen credentials on your login applications, which means they can’t take over accounts in the first place. CARDING Prevent criminals from using your checkout pages to validate stolen credit cards. INVENTORY HOARDING Ensure your campaigns and most in demand items and are sold directly to your customers, not to scalpers. SCRAPING Control how scrapers and aggregators harvest data from your website, allowing you to protect sensitive data and manage infrastructure costs. GIFT CARD ATTACKS Ensure gift card value, loyalty points and other stored value remains in your customers hands. MARKETING FRAUD Ensure your business analytics and marketing spend are based on bot free data. The Easiest, Most Effective Way to Ensure PCI DSS Compliance One important requirement of the Payment Card Industry Data Security Standard (PCI-DSS) is Requirement 6.6. Shape Defense is a Level 1 PCI-certified security-as-a-service solution that actively defends against automated cyber-attacks and vulnerabilities on web applications, including attacks that may evade other legacy security solutions such as WAFs, IPS, and DDoS mitigation tools.‍‍

• Prevents and detects web-based attacks
• Sits in front of public-facing web applications
• Configured to block web-based attacks
• Actively running and up-to-date
• Generates audit logs
• Generates attack alerts and immediate investigation