
Deindeal Customer
Story
Blocking Unwanted
Automated Traffic
.webp)

Deindeal was founded in 2010, is now one of the largest e-commerce portals in Switzerland and is part of the Ringier group. The company has received numerous awards for its business, including the prestigious Swiss E-Commerce Award. Its range of products includes exclusive brand products, travel deals and local deals - all with high discounts.
Having a WAF with bot detection built-in worked well for us when we had a web-based platform. The browser gives you some context to help you to spot bad bots. Moving to APIs means that you have no context through which to identify automated traffic. It was clear that a new security solution would be needed for our API based platform.
'- Alexandre Branquart, CIO/CTO & Co-Founder'

The Challenge
How Approov Mobile App Protection Helped
Approov was added to the Deindeal platform to specifically ensure that only genuine mobile app instances could use the API. This was directly to address the risk of scripts impacting revenue by impersonating app traffic - in order to scrape product data and then buy up high demand items, or to commit other fraudulent acts.
Implementing Approov into the Deindeal was straightforward. The token check was implemented at the edge of the network within the Cloudflare CDN in order to reject bad traffic as early as possible.
The Approov protection was deployed into production and monitored using the Approov metrics in order to ensure that everything was working as expected. Once it was clear that automated traffic was being identified correctly and that the inclusion of Approov had zero impact on the customer experience, all bots and scripts were blocked.
Over time, adjustments to the applied security policies have been made via Approov’s over-the-air capability, making managing the deployment very efficient.
Alexandre has this advice based on Deindeal’s Approov experience:
Read on


Retail Cyberattacks Highlight Need for Mobile App and API Security
The recent cyberattack on UK retailer, Marks & Spencer (M&S), along with similar threats to Harrods...

Enhancing Mobile Payment Security: A Comprehensive Approach with Approov
Mobile payment systems are increasingly popular, offering convenience and speed for consumers and...

Shielding APIs that Service Mobile Apps: Part 1 - Why?
In this series of articles, we are going to explore the why, what, how and when of shielding APIs...

What Can You Test with an Approov 30-Day Free Trial?
Everything. If you are reading this, then it's probably because you are actively considering a free...

Why the OWASP Mobile Application Security Project is Critical
The OWASP MAS project continues to lead the way in mobile application security. This article...

Why Loyalty Apps Need to Be Protected - and How to Do it
My favorite local sushi restaurant has just introduced a loyalty program so I can get discounts...

Empowering Mobile Payments: Approov's Security and PCI MPoC Mastery
In the ever-evolving landscape of mobile applications, especially those dealing with sensitive...

How To Protect Against Account Takeover In 2021
Editor's note: This post was originally published in September 2021 in Threatpost.
Data breaches...
Request a Demo
Give us 30 minutes and our security experts will show you how to protect your revenue and business data by deploying Approov to secure your mobile apps and your.
Get a Trial
Approov offers a complimentary 30 day trial (no credit card necessary) to give you immediate and valuable insight into the security risks of your mobile apps and the devices they run on.