Tatcha Gains Peace of Mind with Autonomous Protection Against Scraping & DDoS Attacks

Tatcha, a luxury Japanese skincare brand, faced persistent bot-driven scraping and DDoS attacks that disrupted their online operations. The company needed an AI-driven, intuitive, and easy-to-use platform that would provide real-time protection while helping them gain visibility into the threats targeting their business. They chose DataDome, and after a seamless integration into their Cloudflare infrastructure, Tatcha drastically reduced bot traffic and gained greater insights, allowing them to free up significant time that was previously spent fighting bad bots.

The challenge: Fighting web scrapers stealing product information, pricing data, & inventory details

As a leading luxury skincare brand, Tatcha relies on its online presence to engage customers, drive sales, and maintain the exclusivity of its high-end products. However, their website had been under constant threats from bad bots, particularly scraper bots that stole product information and pricing data.

“We would see huge spikes in traffic, but they weren’t real customers,” recalls Andrea Carver, SVP DTC & Technology at Tatcha. “We knew that bots were aggressively scraping our site, but we had no efficient way to stop them.”

Occasional DDoS attempts also put strain on Tatcha’s infrastructure. At first, the team tried to manually identify and block fraudulent traffic. “It was a huge time drain,” remembers Jacqueline Supman, Director of Product Management. “Every time we saw an abnormal spike, we had to drop everything and try to mitigate it.”

Their reliance on basic security tools like Google reCAPTCHA proved ineffective against increasingly sophisticated bots, so Andrea and Jacqueline began looking for an efficient, proactive solution that would save them time. 

The solution: Intuitive AI-powered protection covering all types of cyberfraud & bot threats

After evaluating a few vendors, Tatcha chose DataDome for its AI-driven bot protection, easy integration into the company’s Cloudflare infrastructure, and high expertise in bot detection and mitigation.

“Part of our selection process was about finding a vendor who could guide us while providing a best-in-class solution,” says Jacqueline. DataDome stood out for its security expertise, not just as a service, but as an ongoing strategy.

One of the biggest selling points was how intuitive and hands-off the solution was. Tatcha couldn’t afford a solution that required constant monitoring or rule adjustments. Other providers offered protection against bots, but their platforms were either too technical, requiring extensive manual configurations, or too limited in scope, focusing on a single type of threat, such as DDoS or CAPTCHA validation.

Andrea adds: “We were particularly interested in how DataDome uses AI and machine learning to stay ahead of evolving threats. Many solutions rely on static rules or signature-based detection, which we felt would become outdated quickly. But DataDome continually adapts and refines detection models based on real-time data, and that’s what set it apart for us.”

The results: A stronger, more autonomous security posture… And no more bad bots

After a short and efficient setup, DataDome was fully protecting Tatcha’s websites. Almost immediately, bot traffic dropped drastically, and scraping & DDoS attempts were no longer a daily concern. Back-end inefficiencies caused by bot activity completely disappeared, from wasted time investigating spikes to impacts on website performance.

“There’s a real peace of mind knowing that bot traffic is being managed without us having to intervene,” says Andrea. “It’s one less thing keeping me up at night.”

Beyond protection, the partnership with DataDome had a significant impact on Tatcha. The proactive support team provided regular updates on emerging attack patterns, security trends, and best practices. Through these continuous check-ins and detailed insights, DataDome helps to raise awareness of the evolving threat landscape, ensuring that Tatcha is always one step ahead of potential risks.

Andrea appreciates this: “I think our Account Manager reaches out more than any other vendor I have. He’s incredibly proactive in informing us about upcoming features, doing demos, etc. DataDome has a very good understanding of evolving security requirements and helps us stay on top of new threats and how we need to comply. I am thankful for that partnership.”

Thanks to DataDome, the Tatcha team now feels empowered and supported to lead a proactive approach to threat mitigation. 

Test your site now and see if your domain and subdomains are safe from bad bots. Get a free Vulnerability Scan today.