How Castle is Building Codeless Customer Account Protection
Sep 11, 2019Guest Author

Summary
This post details Castle's integration with Cloudflare Workers, Apps for Workers, and Workers KV to provide a codeless, edge-based customer account protection solution. It highlights how Workers are used to access request/response interactions at the edge without introducing latency, how Apps for Workers distribute the security logic, and how Workers KV stores configurations and user sessions. The post also explains the data flow, including script injection (Castle.js), collection of contextual information (IP, headers), and an advanced routing engine for recognizing security events.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack