Account Protect Updates: Clearer Visibility, Stronger Signals, & More Control

Account fraud can unfold across the entire user journey, from registration and login to password resets and account recovery. 

To protect users effectively, businesses need clear visibility into account activity, strong signals for detecting suspicious behavior, and the ability to respond quickly when risk changes.

The latest Account Protect updates strengthen each of these areas. Customers can now get more visibility into their Account Protect usage, extend detection to password-reset activity through Auth0, and manage their protection status through an API.

Together, these capabilities help businesses build a stronger account-fraud defense, with better visibility into risk and more options for taking action.

More visibility into Account Protect usage

Account Protect customers now have access to a dedicated view on the Plan & Traffic page, bringing consumption and plan information directly into the dashboard.

This update includes:

• Account Protect traffic consumption on the Plan & Traffic page
• Account Protect plan details in the dashboard 

This makes Account Protect easier to manage as customer needs evolve.

Detect more account takeover risk with Auth0 password-reset events

Password-reset flows are a critical part of the account journey and a common target for account takeover attacks. Account Protect now extends its Auth0 integration beyond login and registration events to support password-reset activity, including failed Forgot Password attempts. These events can be collected and analyzed alongside other authentication activity, giving customers deeper visibility into suspicious behavior across the user journey.

With this update, customers can:

• Send password-reset events to Account Protect through Auth0 Log Streams
• Analyze failed password-reset attempts alongside other authentication events
• Add password-reset activity to their account-fraud detection strategy
• Identify more signals associated with account takeover and reset abuse 

Protect legitimate users & challenge suspicious activity 

By adding password-reset activity to the account journey, Account Protect gives businesses more context to distinguish legitimate recovery attempts from suspicious ones. Authentication teams can use these signals to apply MFA or another challenge when there is a meaningful risk signal, while allowing legitimate users to move forward without unnecessary friction.  

Instead of treating every suspicious signal the same way, businesses can make more precise decisions across the account journey: standing down when activity is trusted, and challenging or denying access when the signals indicate a greater risk of account takeover.

Manage protection status through the Account Settings API

Customers can now manage the global protection status of their Account Protect configuration programmatically through the Account Settings API.

The API enables customers to:

• Check whether Account Protect protection is enabled or disabled
• Update the global protection status when needed
• Integrate Account Protect into incident-response workflows
• Include protection status in infrastructure-as-code and security automation
• Verify changes across the API and DataDome dashboard 

Customers can incorporate protection-status changes into response plans when facing a rapidly changing threat, or include them in automated deployment and configuration workflows.

This gives customers more direct and flexible control over how Account Protect protection is managed as their operational needs change.

From detection to protection

These three updates support different customer needs, but together they create a clear progression:

• Understand more: Gain visibility into Account Protect consumption and plan information.
• Detect more: Add password-reset activity to the signals used to identify account takeover risk.
• Control more: Manage protection status through automation and existing security workflows.

The Plan & Traffic update gives customers better visibility into their protection environment. The Auth0 update strengthens detection across a critical part of the account journey. The Account Settings API gives customers more direct and flexible control over how protection is managed.

Together, these capabilities help businesses build a stronger account-fraud defense, with better visibility into risk and more options for taking action.

Not yet an Account Protect customer? Book a demo to learn how DataDome can protect your business from fraud and reduce account takeovers by 99%.