Arkose Labs Recognized in the 2024 Gartner® How to Mitigate Account Takeover Risks Research

Recognized as a Sample Vendor for Bot Mitigation in the Gartner Research

SAN MATEO, Calif. (DATE) – In recent research, information technology research and advisory company Gartner® discussed the ongoing threat that account takeover (ATO) attacks pose to companies. The August 2024 research titled “How to Mitigate Account Takeover Risks,” describes, “Account takeover attacks remain a stubborn security problem in customer and workforce environments. Security and risk management leaders should augment active authentication before and during the user journey and protect the account recovery process.“ Arkose Labs is recognized as a Sample Vendor for Bot Mitigation.

Gartner notes that: “What’s more, attackers have evolved their methods of how to conduct an ATO by tricking victims into becoming accessories or by exploiting account recovery processes. They have pushed the boundaries of ATOs to the point where stealing credentials is not necessarily a requirement for achieving the goal of taking advantage of another person’s account.”

The updated white paper, Economics of Account Takeovers in Banking, reveals that sites protected by a basic CDN/WAF are less effective than those secured by a CDN/WAF plus an advanced solution like Arkose Bot Manager. Arkose Bot Manager is a solution that is prescriptively designed to detect and mitigate even the most sophisticated bot threats, including those from complex headless browser instances used for detection evasion and CAPTCHA solvers leveraging generative AI. This combination of technologies disrupts the ROI that malicious actors operating in the dark web economy hope to achieve through ATO attacks. The findings highlight the importance of enterprises adopting a "better together" strategy by deploying a WAF and an advanced solution.

“AI has become the ultimate wildcard in the cybersecurity arena,” said Vikas Shetty, head of product at Arkose Labs. “Malicious actors are getting creative, grabbing ready-made, AI-powered bots off the dark web like they’re shopping for groceries, and launching highly sophisticated attacks with zero developer or technical know-how. As the number of attackers multiply, so do the AI tools at their disposal, making it critical for enterprises to deploy AI that can outthink and outmaneuver these threats in real time.”

The Gartner research calls for Security and risk management (SRM) leaders who focus on identity and access management to: “Augment existing active authentication approaches by taking passive authentication and risk and recognition signal assessment measures during the user journey, such as passive behavioral biometrics, location intelligence and device security posture assessment.”  Through Arkose Bot Manager, enterprises have access to more than 200 different signals that support risk modeling to mitigate ATO attacks. Read a real-world case study about how a global company detected and stopped ATO.

‍
Gartner, How to Mitigate Account Takeover Risks, By Akif Khan, Dan Ayoub, Ant Allan, 6 August 2024. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.