DataDome DDoS Protect detects application layer-based threats


DataDome unveiled DDoS Protect, a cloud-based service designed to block distributed denial-of-service (DDoS) attack traffic at the edge before it overwhelms an organization’s infrastructure.

DDoS Protect provides always-on, full-stack protection that detects and mitigates application layer-based threats, including evasive and short-lived Layer 7 DDoS attacks, within milliseconds. The solution safeguards businesses against service downtime, wasted resources, and reputational damage resulting from DDoS attacks.

Layer 7 DDoS attacks are among the most challenging cybersecurity threats to address. These attacks operate at the application layer, targeting the very heart of web services with seemingly legitimate traffic that is difficult to distinguish from real user interactions. By leveraging millions of residential proxy IP addresses and sophisticated evasion techniques, attackers can easily bypass traditional defenses.

Even with content delivery network (CDN)-based security services in place, bot-driven DDoS attacks still make up over 20% of application traffic, according to DataDome Advanced Threat Research intelligence from more than 300 customers. This volume of traffic, when part of a targeted Layer 7 DDoS attack, can disrupt critical business services and force organizations to cover the costs of the malicious traffic overwhelming their infrastructure.

“Every organization will be targeted with a DDoS attack. The key challenge is maintaining resilience during the attack to prevent customer dissatisfaction and reputational damage caused by service disruptions, outages, or degraded experiences,” said Benjamin Fabre, CEO of DataDome. “With evolving attack tactics rendering existing network security controls ineffective against Layer 7 threats, we’re proud to introduce a solution our customers can depend on to shield them from these costly impacts.”

DataDome customers are already seeing the benefits of DDoS Protect. It is integrated directly into the DataDome Cyberfraud Protection Platform, combining DDoS protection, Layer 7 application-layer defenses, and bot management in a single, comprehensive solution. Key features of DDoS Protect include:

  • Full stack DDoS protection: Blocks both network and application-layer DDoS attacks. Unlike existing DDoS detection engines, DDoS Protect identifies sophisticated Layer 7 attacks that mimic legitimate traffic and abuse business logic, ensuring real time, accurate defense across all layers.
  • Seamless business continuity: Keeps critical customer-facing services up during attacks with real time detection and mitigation, eliminating downtime and reducing delays in response.
  • Enhanced visibility and transparency:Provides visualization of all L7 DDoS attack traffic with top targets, attack sources, and volume of blocked attacks over time.
  • Automated, hands free security: Delivers real time, automated blocking of attacks, empowering organizations to stay secure without manual intervention.
  • Detection: Analyzing over 5 trillion signals daily, the DataDome platform offers the industry’s most accurate Layer 7 detection engine. DDoS Protect leverages this AI-powered detection engine to stop attacks before they reach their target, all with a <0.01% false positive rate and ensuring legitimate traffic is never blocked or rate-limited.



Source link