Castle Bot Detection review
Behavioral bot detection across web, APIs and mobile, with a free entry plan.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Castle Bot Detection analyzes browser interactions, device properties, IP addresses and email signals to identify automated traffic and account abuse. Its Browser SDK collects behavioral and device data, then creates request tokens that a backend can send to Castle’s Risk or Filter APIs. Teams can apply the service to credential stuffing, fake signups, spam, transaction abuse and account-takeover patterns, with policies that allow, challenge or deny requests. A dashboard supports activity investigation and policy configuration.
The published plans cover different operating scales. Free costs $0 per month and includes $5 of API usage, 3 days of data retention, 3 seats and 1 environment. Pro costs $200 per month, includes $200 of API usage, supports 5 API requests per second, and adds chat and email support. That API budget is shared between Risk or Filter requests and IP lookups; the listed allowance is either 40,000 Risk API calls or 200,000 IP lookups per month, not both together. Enterprise costs $4,000 per month and adds custom MTU or volume pricing, dedicated support and an SLA.
Castle’s detection scope is notable for combining behavioral analysis, browser and device fingerprinting, headless-browser and spoofed-device detection, IP and proxy analysis, email-pattern and domain-age analysis, and CAPTCHA flows triggered by Castle responses. Real-time APIs, a JavaScript SDK, cloud deployment and browser-extension support fit teams protecting web, API, iOS and Android experiences. Organizations needing configurable abuse decisions across several channels should consider Castle; teams requiring longer free retention, larger included usage or a lower-cost enterprise tier may prefer a simpler alternative.
Castle Bot Detection pros and cons
- Where it wins
- Behavioral, device, IP and email signals in one detection workflow
- Risk and Filter APIs support allow, challenge or deny decisions
- Covers web, API, iOS and Android deployments
- Where it doesn't
- Free plan limits retention to 3 days, with 3 seats and 1 environment
- Pro's $200 API budget is shared across requests and IP lookups
- Enterprise pricing starts at $4,000 per month
Castle Bot Detection fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update