We’ve been on a journey to rebuild a defensive security solution against highly skilled, motivated, and persistent adversaries. Our new v2 platform development has been years in the making. Over this time, we’ve focused on adversarial thinking in all phases of the v2 design by understanding tactics, identifying common pitfalls, and analyzing every bot we’ve ever seen.
In many ways, it’s highly advantageous for Kasada to have entered the bot mitigation space after the first generation of providers. The rise of new automation frameworks and long-term challenges with other providers’ efficacy has influenced our V2 architecture in order to avoid the pitfalls that others have made. For these reasons, long-term efficacy is a central pillar of our company strategy and roadmap.
Time: A Defender’s Enemy
“Time is your only enemy, it disappears very quickly and never gives you a second chance.” – Steve Douglas
The automated threat landscape continues to change, as automation frameworks are rapidly evolving, making it easier and cheaper for bot operators to create stealthy bots that fly under the radar. It is hard to believe that the popular automation framework, Puppeteer, is only three years old and Playwright has only been around for just over a year. There is no doubt that the pace of innovation with these DevTools will continue to rapidly progress. A major point to consider is that most bot defense systems were created before these frameworks ever even existed, and they didn’t account for these frameworks in their architecture.
This is exactly why long-term efficacy of a bot mitigation product offering needs to be a core pillar for bot detection. Too often, solutions work just fine at the onset, only to quickly lose their efficacy months later, as adversaries reverse engineer the solution and make the information easily accessible to the masses in order to exploit them. To have bot operators reverse engineer your sensors essentially throws your R&D out the window, rendering it ineffective.
