A Year of Evolution: How Account Protect Has Grown Since Launch

One year ago, we introduced Account Protect at RSA, a solution designed to combat fraud at the account level—stopping account takeovers, fake account creation, and credential stuffing while minimizing friction for real users. 

Account Protect goes beyond traditional bot protection by leveraging multi-layered AI to map relationships between users, their devices, locations, and past behaviors to detect anomalies that indicate fraud. By analyzing multiple signals—including email patterns, login history, device fingerprints, behavioral cues, and geo-location—our solution identifies even the most subtle fraud attempts with precision. With 24/7 fraud prevention, Account Protect empowers businesses to stay ahead of evolving threats while maintaining a seamless user experience.

A look back: key enhancements to Account Protect

Customer feedback loop: refining detection accuracy

Fraud detection models improve with real-world feedback, and over the past year, Account Protect has introduced a customer feedback loop to enhance precision. This enhancement has enabled:

• Real-time fraud classification improvements, reducing false positives and strengthening detection quality.
• API and SDK integration for seamless fraud feedback submission within existing security workflows.
• Future dashboard integration, allowing manual feedback submission from event and user activity pages.

By integrating customer insights directly into fraud models, Account Protect has ensured faster response times and continuously optimized detection strategies.

Expanding integrations: comprehensive SDK support for Account Protect

Over the past year, we’ve significantly expanded the range of SDKs supported by Account Protect, making it easier for teams to integrate advanced fraud detection into their existing tech stacks. Our integrations now include Ruby, Go, Java, Node.js, .NET Core, Scala, Python, Laravel, and Symfony.

Several of these SDKs are particularly beneficial for mobile app environments:

• Ruby SDK: Specifically designed for Ruby-based backends supporting mobile apps, ensuring real-time fraud monitoring without impacting app performance.
• .NET Core SDK: Ideal for cross-platform mobile apps, enabling secure and efficient integration for authentication and fraud prevention.
• Java SDK: Widely used in Android app development, it provides precise, real-time fraud detection directly within mobile login and registration workflows.
• Node.js SDK: Preferred for scalable backend services in mobile apps, offering responsive fraud detection that maintains user experience, even with high mobile traffic volumes.

With these Account Protect integrations, businesses benefit from:

• Real-time fraud detection through behavioral and device analysis
• Minimal engineering effort, simplifying and accelerating deployment
• Comprehensive user coverage across login, registration, and ongoing user activities
• Flexibility and scalability to seamlessly adapt to evolving security needs

These integrations empower businesses to swiftly and effectively secure user accounts while maintaining an optimal user experience.

Smarter list management for fraud prevention

Over the past year, we’ve made it easier for fraud teams to manage Allow and Block lists, a fundamental capability for account security. Instead of relying on engineering support or API calls, customers can now adjust access lists directly from the DataDome dashboard. This enhancement has provided a faster, more flexible way to manage fraud prevention settings and respond to threats in real time.

Beyond ease of use, this update ensures that lists containing Personally Identifiable Information (PII) are securely encrypted to maintain privacy and compliance. Permission-based access controls restrict modifications to authorized personnel, safeguarding sensitive data.

While AI-driven detection remains at the core of Account Protect, manual list management provides an additional layer of control, allowing teams to fine-tune fraud prevention strategies based on specific business needs. This balance between automation and customization helps fraud teams adapt quickly to emerging threats while maintaining a seamless user experience.

Better together: how Bot Protect strengthens Account Protect

Integrating Account Protect across diverse environments empowers businesses to proactively detect and stop account fraud. To strengthen defenses even further, combining Account Protect with Bot Protect creates multi-layered security—effectively filtering automated threats before they can target authentication processes. While Account Protect identifies and blocks fraudulent account activities, Bot Protect prevents malicious bots from ever reaching login and registration flows. Together, they provide:

• Enhanced fraud detection accuracy, leveraging bot intelligence to refine fraud decision-making.
• Reduced user friction, as legitimate users encounter fewer CAPTCHAs and authentication challenges.
• Future-proof security, with AI-powered bot filtering ensuring Account Protect remains effective against evolving threats.

This dual-layer approach is already delivering tangible results in the real world. At Vinted, a C2C marketplace with over 100 million users, combining Bot Protect and Account Protect has helped block credential stuffing attacks, eliminate fake accounts, and prevent millions in potential fraud losses. The shared intelligence between both products has proven especially valuable—creating a proactive, adaptive defense that protects both web and mobile users while preserving performance and user trust.

Looking ahead

The fight against fraud is ongoing, and so is our commitment to improvement. In the coming year, we’ll continue refining Account Protect, introducing even more advanced fraud detection capabilities, automation features, and integrations to help businesses stay ahead of evolving threats.

Want to see how Account Protect can safeguard your accounts? Schedule a demo today.