Case Study: Scoffable minimizes revenue loss and protects sensitive data with Approov

Scoffable secures mobile APIs with Approov in a 30-day trial

Scoffable, a provider of online takeaway ordering, faced the challenge of securing its mobile APIs against DDoS attacks and abuse to prevent revenue loss and protect sensitive customer and restaurant data. They employed initial measures like rate limiting and reCAPTCHA but required a more robust, mobile-specific security solution from Approov to harden their defenses and maintain a frictionless user experience.

Approov implemented its Mobile App Protection solution, which uses signed JWTs for quick validation. This worked in conjunction with Scoffable's existing Cloudflare setup to effectively solve their DDoS mitigation problem. The solution also integrated with Apple DeviceCheck to ban specific devices and prevented non-Scoffable applications from accessing their APIs, enhancing security while reducing user friction on iOS.

Scoffable