Ulta Beauty Reduces Costs by Blocking API-based Enumeration Attacks

1 Pages

Ulta Beauty partnered with Cequence Security to stop a large-scale API enumeration attack targeting a third-party local-inventory search API. The attack generated traffic 700 times higher than normal, cycling through over 153,000 product and SKU combinations and scraping data across 61,000 zip codes. While the attackers’ motives were unclear, possibilities included mapping popular inventory for real-world theft. By mitigating the attack, Ulta Beauty significantly reduced infrastructure and inventory-related costs, preventing further exploitation and ensuring API security.

Join for free to read

Case Study Beauty by the Numbers:

Guide API-based progressive modernizationapproach

Case Study Case Study: How Ulta Beauty Quickly Leveraged Movable Ink for…

Case Study Ulta Beauty recruits 88 new partners and achieves 8% revenue…

More from Cequence

Case Study Poshmark Prevents Automated Attacks with Cequence

Vendor Sheet Protecting Financial Services APIs From Automated Attacks

Vendor Sheet The Account Takeover Cat-and-Mouse Game

Vendor Sheet Protecting Web Apps, Mobile Apps, and APIs from Bot Attacks and…

Case Study

Ulta Beauty Reduces Costs by Blocking API-based Enumeration Attacks

Ulta Beauty Reduces Costs by Blocking API-based Enumeration Attacks

You Might Also Like

More from Cequence