Castle GTM brain

Castle provides developer-oriented fraud and abuse detection APIs to online platforms.

category

Account abuse and bot detection

market profile

  • text: Online platforms need to distinguish legitimate users from automated and human abuse across account events.
  • text: Castle combines API-based intelligence with a self-serve entry tier and enterprise plans.

personas

  • title: Head of Trust and Safety or Fraud
    pains:
    • Fake accounts and coordinated abuse consume investigation time.
    • Account takeover and transaction fraud damage customer trust.
  • title: Security Engineering Lead
    pains:
    • Credential stuffing and bot traffic need real-time detection without blocking legitimate users.
    • Disconnected device, IP and behavioral signals are hard to correlate.
  • title: Product Engineering Manager
    pains:
    • Fraud controls must fit signup and login workflows without adding unnecessary user friction.
    • Integration and pricing need to be predictable for a small team.

icp

  • text: Consumer-facing software, gaming, fintech and commerce platforms with user accounts and signup or login events.
  • text: Developer teams from early projects to large enterprises that can integrate an API and monitor account events.

message pillars

  • text: Stop automated attacks and account abuse at scale.
  • text: Combine distinct risk signals to expose coordinated activity.
  • text: Minimize friction while delivering enterprise security.

objections

  • objection: Will this disrupt legitimate users?
    response: Evaluate risk signals and false positives on your own account events before enforcing policies.
  • objection: Is the cost predictable as volume grows?
    response: The pricing page lists included usage and request rates; model anticipated traffic before rollout.
  • objection: Can we try it before a large contract?
    response: A free tier supports evaluation, with an enterprise option for larger needs.

competitors

  • name: DataVisor
    why: Fraud and risk management competes for abuse prevention budgets.
  • name: Forter
    why: Fraud and abuse protection overlaps with Castle's risk platform.
  • name: Stytch
    why: Offers bot protection for authentication and signup traffic.

influencers

  • name: Johan Brissmyr
    url: https://techcrunch.com/2016/03/21/castle-yc/
    why: Co-founder discussing the original account takeover product.

keywords

  • account takeover prevention
  • bot detection API
  • device fingerprinting
  • fake account detection
  • credential stuffing protection
  • fraud risk scoring
  • SMS pumping prevention

voice

  • Technical and direct
  • Confident
  • Developer-oriented

signals

  • text: A platform sees an increase in fake signups, account takeovers or SMS pumping.
  • text: An engineering team is adding fraud checks to signup, login or transaction events.

pricing

model: freemium
starting price: $0/month; Pro $200/month

motion

hybrid

channels

  • SEO
  • developer documentation
  • technical content
  • self-serve
  • LinkedIn

confidence

high

Founders

  • name: Johan Brissmyr
    title: Founder/CEO
    role: CEO
  • name: Sebastian Wallin
    title: Founder/CTO
    role: CTO

Back to YC companies