Betfred & Distil Networks Prevent Account Takeover | Betfred Case Study

October 16, 2018

At a Glance

  • Betfred
  • Online Gaming


  • Significant proportion of bad bot traffic
  • High frequency of account takeover attacks
  • Application denial of service from infrastructure strain
  • Team resources stretched thin
  • Team resources stretched thin


  • Reduced traffic to website by half
  • Dramatic reduction in brute force credential stuffing attacks
  • Eliminated unauthorized scraping of real-time betting odds
  • Less infrastructure strain
  • Prevented downtime during biggest event of the year


Applicable OWASP Automated Threats

  • OAT-011 Scraping
  • OAT-008 Credential Stuffing
  • OAT-015 Denial of Service
  • OAT-014 Vulnerability Scanning
Request a Demo

Betfred prevents account takeover attacks, reduces downtime, and dramatically decreases infrastructure usage by deploying Distil Networks

Distil has allowed me to focus somewhere else. It's totally eradicated our bot issues. Sometimes, I forget it's in place because it's doing such a good job.

Shaun Clark, Head of Infrastructure, Betfred


Betfred is the 4th largest bookmaker in the UK with over 10,000 employees. Headquartered in Warrington, England, the company operates over 1,650 bookmaking shops with another 51 shops located on racecourses throughout the UK. Betfred also runs one of the fastest growing digital gaming platforms through and numerous other domains and mobile applications.

On some Betfred domains, the volume of bad bots was as high as 87% of all web traffic. This took significant hours of IT team’s time to mitigate while also wasting bandwidth and infrastructure resources. “The impact on the backend systems was immense,” said Shaun Clark, Head of Infrastructure. “We did have a DDoS protection layer and our WAF, but they only do so much. We found that the attackers were constantly changing the attack vector, so each time we would put something in place, they would circumvent it within a number of weeks.”

Previous Flipbook
Bad Bot Report 2019: The Bot Arms Race Continues
Bad Bot Report 2019: The Bot Arms Race Continues

In the 2019 Bad Bot Report you’ll learn what bad bots do, the business behind them, and the tell-tale signs...

Next Article
Find Out If Bad Bots Are Gaming Your Websites And Apps
Find Out If Bad Bots Are Gaming Your Websites And Apps

Gaming websites are one of the prime targets for bad bot attacks, so we recently took a closer look at the ...