APIs

Easy-to-use APIs to power your dream security

Our goal is to provide your users with a secure and frictionless security experience. All of your basic use cases can be covered through a handful of endpoints. You send us an event, we evaluate it, and return an inline verdict. Your brand. Your users. Castle’s Intelligence.

Create New Account

Backend

Realtime event authentication

CastleContext context = castle.contextBuilder()
    .fromHttpServletRequest(request)
    .build();

Verdict verdict = castle.client().authenticate(
  CastleMessage.builder("$login.succeeded")
    .context(context)
    .userId("user1234")
    .build()
);

verdict.getAction()

verdict = castle.authenticate(
  event: '$login.succeeded',
  user_id: 'user1234'
)

puts verdict[:action] # => "allow", "challenge" or "deny"

$verdict = Castle::authenticate(array(
  'event' => '$login.succeeded',
  'user_id' => 'user1234'
));

echo $verdict->action;

verdict = castle.authenticate({
    'event': '$login.succeeded',
    'user_id': 'user1234'
})

print(verdict['action']);

const response = await castle.authenticate({
  event: EVENTS.LOGIN_SUCCEEDED,
  user_id: "user1234",
  context: Castle.getContext(request),
});

console.log(response.action);

var result = await castle.Authenticate({
  Event = Events.LoginSucceeded,
  UserId = "user1234",
  Context = Context.FromHttpRequest(Request)
});

Console.WriteLine(result.Action);

Frontend

Device fingerprinting

<script src="https://d2t77mnxyo7adj.cloudfront.net/v1/c.js"></script>
<script>
  _castle('setAppId', '451236789012343');
  _castle('identify', 'user1234'); 
</script>

Security without compromise

Evaluate any user event for suspicious or bot-like activity using our sychronous /authenticate endpoint. Get a response in under 50 ms.

Flexible 3-tier verdict system

Receive inline risk verdicts that map to one of three recommended actions: Allow, Challenge, or Deny. Use these verdicts to protect, notify, and recover user accounts.

Built for consumer scale

Our APIs are flexible and easy-to-use while being powerful enough to handle unicorn-sized user bases.

SDKs for all languages

We have open source SDKs published for popular programming languages to help you get started quickly. You can review them all from our un-gated developer docs.

Reliability & Scale

Built for consumer-grade applications

We support thousands of developers, and leading technology brands from all across the globe.

50ms

Avg. response time

Our products are designed to power user exeperiences inside leading applications. Low latency response times over secure APIs is a top priority.

99.99%

Uptime

Castle's integration model ensures it is never a single point of failure. Enterprise SLAs guarantee service uptimes to handle scale with confidence.

SOC II

Soc-2 and GDPR compliant

Meeting your organization’s ongoing compliance needs is a priority. We undergo independent third-party audits and certify our products with SOC2, and more.