Yes. Protect checks every request at your edge, including the APIs your own site and apps call. Browsers that are blocked see a branded page; API clients get a clean status code your app can handle.
Industries · Ticketing & e-commerce
Keep tickets and stock for real customers
Stop scalpers, inventory hoarding and automated checkout across your site, queue and API, without slowing down genuine buyers.
What you're up against
Scalper bots
Automated buyers take capped or limited stock the moment it's listed, then resell it at a markup to the fans you built the sale for.
Inventory hoarding
Bots fill baskets and hold stock in checkout so real customers see it as sold out, then release it to the buyer who pays them.
Automated checkout and queue jumping
Scripts call your checkout and queue APIs directly, skipping the pages a person would use and the form a widget would protect.
Fake phones and device farms
Real mobile browsers run in software on rented servers, or racks of real handsets driven by automation, so every bot looks like a different shopper.
How Prosopo stops it
- Every request checked, not just the checkout form
- Prosopo Protect runs at your edge and scores every request to your pages and APIs before it reaches your servers, whether it comes from a browser, a script or an app.
- Devices that aren't what they claim
- Prosopo spots when a session claims to be a phone but its claims don't match the device it runs on, and catches racks of real handsets by how they behave.
- Real buyers keep moving
- Most genuine visitors are cleared by a check the browser completes on its own, with no puzzle. Challenges appear only when something looks wrong.
- Support can see why
- Every block names the detector that fired, so your support team can answer a customer who was stopped without escalating.
Find out how much of your stock bots are taking
A short call with an engineer reviews what's reaching your site, where your current setup leaves gaps, and how an evaluation would be judged. Nothing to install first.
Questions
Something else? Ask an engineer.
Does Prosopo protect our API as well as our website?
Will genuine buyers notice?
Most won't. On a UK ticket resale platform, 84% of real visitors were cleared without seeing any puzzle. Challenges are only shown when a session looks automated.
Can we try it during a sale without risk?
Every Protect deployment starts in observe-only mode: it checks your live traffic and records what it would have blocked, but blocks nothing, so you see your own numbers before switching blocking on.






