Shape Security analyzes 1.5 billion logins per week and protects 350 million user accounts. In 2016 alone, 1.6 billion credentials were leaked and sold or traded by criminals on dark web markets. Shape uses headless browsers like PhantomJS to automatically test leaked credentials on other sites, stopping over $1 billion in fraud losses in 2016. However, captchas intended to prevent automated attacks do not work and ruin the user experience.

1. WAFFLEJS
Shape Security
OCTOBER 2016

2. 1.6 Billion
Leaked credentials in 2016 alone
2.1

3. "The security aspect of cyber is very, very tough."

4. This data gets sold

5. sold
tradedThis data gets

6. sold
traded
organizedThis data gets

7. sold
traded
organized
stored by criminals
forever
This data gets

8. Every breach adds a piece of you to a criminal's database.
Passwords, emails, names, security questions & answers, addresses, and more

9. 1. Credentials get tested on other sites
2. Working credentials are traded or sold
3. Targeted fraud is performed with valid accounts
How does this data get used?

10. This isn't cost effective unless automated
BY EVIL
ROBOTS

11. Headless browsers like PhantomJS

12. Shape stops automated attacks in a
post-captcha world.
Captchas ruin UX and don't work!

14. 1.5B
Logins analyzed per week
350M
Protected user accounts
$1B
Fraud losses deflected in 2016

15. Now Hiring!
Web Platform Experts - http://bit.ly/shape-wpe
Help defend the web by doing ridiculous things with JavaScript and Browser APIs
UI Developers - http://bit.ly/shape-ui
Build out a real time analytics dashboard and customer portal with Angular, React, and D3
Backend Developers - http://bit.ly/shape-backend
Build the backend that ingests and powers the real time analytics for billions of transactions