Results
- Endpoints achieved 99.99% uptime by reducing bot traffic spikes.
- Blocked massive "invisible" bot traffic: Kasada stopped 16M scraping attempts (previously labeled "legitimate") in one month, revealing ~80% of total site traffic was bot-driven scrapers.
- Rapidly generated millions in bottom-line savings by delivering time-to-value under 30 minutes, eliminating costly, friction-generating solutions.
- Offered versatile multi-page, multi-site protection, closing defense gaps while reducing friction and latency for authentic users.
- Dramatically reduced the need for manual bot mitigation (saving hundreds of hours) and stabilized performance, mitigating downtime risk valued at ~$100K per hour.
A global hospitality enterprise with 20 premier brands and more than 900 hotel and resort properties in 65 countries across six continents, Hyatt’s purpose — “to care for people so they can be their best” — informs every business decision it makes, including its technology investments.
Hyatt is known for its commitment to operational excellence and distinct guest experiences, and its IT and digital product teams aspire to the same high caliber, working in tandem with the cybersecurity team that prides itself on “leaving no stone unturned.”
At Hyatt, we do our very best every day to protect our guests’ and our colleagues’ information, and we continuously evaluate strategic opportunities to strengthen our cyber defense systems. As one of our most important digital assets, it’s critical that we have myriad controls and layers of protection for hyatt.com. We have a robust combination of human expertise, policies, systems, and solutions in place to protect our digital platforms—and we find Kasada to be one of our most valuable controls within our ecosystem.
— Benjamin Vaughn, Vice President and Chief Information Security Officer, Hyatt
Addressing Tech, Platform Ops, and Information Security Needs
Before implementing Kasada, Hyatt used two primary lines of bot defense, among several layers of platform, to contain standard, albeit potentially damaging, issues, such as fake login attempts, account takeover, and credential stuffing.
