Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.deflect.bot/llms.txt

Use this file to discover all available pages before exploring further.

title

​
Welcome to Deflect

Deflect is an enterprise bot and fraud protection engine that shields your applications from automated abuse at any scale. Unlike traditional CAPTCHAs, Deflect works invisibly in the background — combining device fingerprinting, IP intelligence, behavioral analysis, and session tracking to deliver real-time verdicts without user friction.

​
What Deflect protects against

  • Account fraud: Fake signups, credential stuffing, multi-accounting, account takeovers
  • Automated attacks: Headless browsers, scrapers, and automation tools
  • Malicious traffic: Proxy networks, VPNs, datacenter IPs, and Tor
  • Transaction abuse: Payment fraud, promo abuse, refund fraud
  • API abuse: Scraping, content theft, and automated API exploitation

​
How it works

Deflect uses multiple layers of detection working together:
  1. Device fingerprinting - Analyzes browser characteristics and behavior
  2. IP reputation - Checks against our global threat database (Deflect Atlas)
  3. Behavioral analysis - Monitors user interactions and patterns
  4. Session tracking - Persistent cross-session device and user identity
  5. Proof-of-work - Requires computational challenges when suspicious
  6. Integrity checks - Validates browser environment authenticity

​
Getting Started

To get started with Deflect, contact our sales team or book a demo. Once your account is set up, your team will receive API credentials and a guided onboarding session.

​
Integration overview

​
1. Add the client-side SDK

<script src="https://cdn.jsdelivr.net/npm/@deflectbot/deflect-sdk@latest/dist/index.min.js"></script>

​
2. Protect your frontend

Deflect.configure({ actionId: "YOUR_ACTION_ID" });
const token = await Deflect.getToken();

​
3. Verify on your backend

const response = await fetch("https://api.deflect.bot/verify", {
  method: "POST",
  body: JSON.stringify({
    api_key: "YOUR_API_KEY",
    action_id: "YOUR_ACTION_ID",
    token: token,
  }),
});

​
Next steps