Reported Access ControlsMeasurement & Economics DataDome Blog ·

Kiabi Deploys DataDome Across International Properties to Manage Bot Traffic and Credential Stuffing

Open source ↗

Summary

French fashion retailer Kiabi deployed DataDome’s bot protection platform across all its localized e-commerce websites and its secondhand platform Beebs following a credential stuffing campaign. The deployment replaced manual, reactive Web Application Firewall (WAF) rule configuration with automated behavioral analysis across distributed IP addresses. In addition to blocking malicious login attempts and Layer 7 DDoS attacks, the integration provided Kiabi with operational visibility into SEO crawlers, data aggregators, and AI training agents.

Insight

Enterprise bot defenses are increasingly consolidating fraud mitigation (such as credential stuffing) with general automated traffic governance, allowing security and SEO teams to identify and classify AI data collection agents alongside malicious threats.

Implication

Web scrapers, search crawlers, and AI retrieval agents will encounter tighter edge filtering on major retail platforms as companies replace basic IP-based WAF filtering with automated behavioral bot detection platforms.

Why it matters

When enterprises adopt integrated bot management suites to protect user accounts, standard crawler access is categorized and controlled under the same behavioral enforcement layer, raising the technical barriers for uncoordinated web indexing and automated data collection.

Evidence