Introduction

IntelliFend’s RequestShield is a specialized bot mitigation solution designed to protect high-value website endpoints, such as login pages, account creation, and checkout processes, etc., from automated attacks. In an era where bot campaigns are increasingly sophisticated, RequestShield addresses the problem of abusive traffic by shifting the economic burden back onto the attacker. This ensures that the backend resources are reserved for legitimate human users rather than being consumed by malicious automated scripts.

During the soft launch phase, the product operates as a Proof-of-Work (PoW) system that runs directly inside a visitor's browser. Rather than relying solely on static blocking rules, RequestShield requires every protected request to be accompanied by a unique "digital proof" or token. While solving this computational challenge is nearly instantaneous and invisible for a single legitimate user, it becomes extremely resource-hungry and expensive for attackers attempting to launch millions of requests, effectively making large-scale abusive campaigns unsustainable. Upon the official launch, RequestShield will evolve to incorporate a broader range of identification signals - including browser environment, request patterns, TLS fingerprints, and behavioral analysis - to distinguish human visitors from bots with even greater precision and ensure long-term protection against sophisticated automated threats.

The workflow is designed for seamless integration between the client and the server. The IntelliFend Browser SDK handles the heavy lifting of generating a fresh token immediately before a protected request is sent. This token is transmitted to the server via the X-IntelliFend-Token header. The application's backend then uses a dedicated IntelliFend Backend SDK to verify this token. By enforcing the isAllowed() decision returned by the SDK before processing any sensitive operation, you can ensure that only verified, non-replayed requests are permitted to reach the core business logic.