Company: FSLY
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001517413-25-000063
Chunk: 22

Company: Fastly, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 22
---
 APIs. Our solution requires no tuning, and is more accurate than the traditional rule or signature-based approaches. Our WAF can be installed in any infrastructure: cloud, container, on-premise data center or hybrid environments or at the edge. Key features include:

•Bot Management. Bad bots can perform content scraping, tie up system resources, perform account brute forcing and other harmful actions. Our solution (available as part of our Next-Gen WAF) monitors web application and API traffic for automated bot activity, allowing customers to automatically block malicious bot-generated web requests, while providing access for wanted or verified bots.

•API Protection. Attackers often target sensitive APIs, attempting to validate stolen credit cards, perform ecommerce gift card fraud or obtain patient healthcare records. We help customers stop API abuse by enabling them to monitor for unexpected values and parameters submitted to API endpoints, and block unauthorized requests.

•ATO Protection. Account takeover (“ATO”) occurs when attackers use authentication credentials to take over legitimate user accounts. Attackers test stolen credentials in an automated manner called “credential stuffing.” Our Account Takeover Protection empowers customers to automatically block and alert on credential stuffing attacks.

Bot Management. Fastly's Bot Management is an add-on service that provides customers with visibility into bot traffic, allowing them to differentiate between good and bad bots at the network edge, closer to where requests arrive and further from their origin. They can then enforce rulesets and policies in the Fastly Next-Gen WAF control panel as part of their web asset and application protection measures. 

Advanced Rate Limiting. Advanced Rate Limiting enables customers to stop malicious and anomalous high volume web requests and reduce resource consumption while allowing legitimate traffic through to application and API endpoints—doing so means companies can provide a superior customer experience that scales to meet increasing demand.

DDoS. Customers using Fastly’s CDN automatically get access to our always-on DDoS protection capabilities. These capabilities provide immediate protection from Layer 3 and 4 DDoS attacks which can target network infrastructure by flooding systems with large volumes of traffic.Our high-bandwidth, globally distributed network is built to absorb these network layer DDoS attacks, helping to ensure websites and services stay up and running despite attacks.

Fastly DDoS Protection is an add-on service which provides extra application layer protection against DDoS attacks. Fastly DDoS Protection blocks application DDoS attacks without requiring any upfront tuning. When unexpected volumetric attack events arise, our proprietary attribute unmasking techniques validate their legitimacy, and if malicious, begin scanning