PerimeterX

Definition

PerimeterX was a bot mitigation and application security company whose platform detected and blocked automated attacks such as credential stuffing, scraping, and carding fraud across websites and mobile apps; the company was acquired by HUMAN Security, and its technology now operates as part of HUMAN's broader bot and fraud protection suite. The name PerimeterX still appears in product documentation and legacy deployments referring to that original bot defender and its associated account-protection and page-integrity modules.

Overview

PerimeterX was founded to address the rise of automated attacks against e-commerce and consumer-facing web applications, at a time when credential-stuffing campaigns following large data breaches were becoming a routine threat and when client-side supply-chain risks, such as compromised third-party JavaScript, were emerging as a distinct attack surface alongside conventional bot traffic. Its product line grew to cover both server-side bot detection and client-side page-integrity monitoring. The platform's bot detection worked by analyzing behavioral and environmental signals collected from the browser or mobile app, comparing patterns such as interaction timing, navigation flow, and device characteristics against models trained to separate human sessions from scripted ones, and applying blocking or challenge responses to sessions scored as automated. A distinguishing piece of the PerimeterX product line, called Code Defender, focused specifically on monitoring first- and third-party JavaScript running on a page to detect tampering or injected scripts, addressing a different risk than pure bot traffic: malicious code that had been inserted into a legitimate page, for example through a compromised advertising or analytics tag. Within the bot management market, PerimeterX competed with Kasada and DataDome on core bot detection, but its added emphasis on client-side script integrity gave it a slightly broader positioning that touched on web application security and digital skimming defense rather than automated traffic alone. Following its acquisition by HUMAN Security, the PerimeterX technology was integrated into HUMAN's unified platform, which also incorporates HUMAN's own ad-fraud and account-integrity detection heritage, so the combined entity now spans a wider set of fraud and bot use cases than PerimeterX offered as a standalone company. Organizations that adopted PerimeterX, and now HUMAN, use the technology to protect login and checkout flows from credential stuffing and carding, to prevent inventory and pricing scrapers from degrading site performance or undercutting pricing strategy, and to detect Magecart-style digital skimming attacks that steal payment card data through compromised client-side scripts. Retail, travel, and financial services were prominent adopters given their exposure to both bot traffic and payment-page tampering risk. Because PerimeterX no longer exists as an independent company, organizations evaluating it today are effectively evaluating HUMAN Security's platform, and documentation or contracts referencing PerimeterX by name typically reflect either legacy deployments or product modules that have since been rebranded. As with any bot and script-integrity product, effectiveness depends on continued signal updates and tuning, and highly targeted attacks against a single site can still find gaps over time.

Key Features

• Behavioral bot detection analyzing interaction timing and navigation flow
• Code Defender module for monitoring first- and third-party script integrity
• Detection of digital skimming and Magecart-style payment-page tampering
• Protection across login, checkout, and account-management flows
• Now integrated into HUMAN Security's unified bot and fraud platform
• Mobile app and API coverage alongside standard web traffic

Use Cases

Alternatives

Frequently Asked Questions

Related in Cybersecurity