Cequence Security has introduced two capabilities, Intent Graph and Biometric Check, aimed at advancing bot defence across web, mobile, API, and agentic AI traffic. These features are designed to address automated threats that are increasingly able to operate without relying on traditional client-side signals.
Standard bot defence approaches often depend on browser-based signals such as CAPTCHAs and device fingerprints. However, modern automation tools can sometimes use real browsers and generate sessions that resemble legitimate user activity, which reduces the effectiveness of these methods. This shift has led to interest in alternative detection approaches.
The rise of agentic AI introduces additional challenges, as some AI-driven systems operate outside conventional browser environments, making traditional client-side signals less applicable. In this context, Intent Graph is positioned as a behavioural detection approach that does not rely on those legacy signals and instead focuses on modelling user behaviour. It is described as being able to reflect application-specific user flows and adapt to changes in traffic patterns.
Coverage for this approach is described across several areas:
- Web: credential theft, scraping, and account takeover attempts
- Mobile: automated abuse that bypasses application-level protections
- API: business logic abuse, carding, and data theft
- Agentic AI: distinguishing between legitimate and malicious AI-driven agents
In one reported case, attackers adjusted their methods multiple times over a two-day period, while legitimate user activity was reportedly unaffected.
The Biometric Check feature is described as an additional layer for bot detection and user verification. It is designed to reduce reliance on mechanisms such as CAPTCHAs by using device-based cryptographic verification through secure hardware enclaves or biometric interfaces, aiming to minimise user disruption during verification.
This approach is presented as a way to help distinguish legitimate traffic from automated or fraudulent activity, and it is intended for use in environments where secure verification is important, including financial and healthcare applications.
According to CTO Shreyans Mehta, the company’s approach is informed by large-scale analysis of API traffic and behavioural patterns. He describes Cequence’s platform as providing unified protection intended for use in environments shaped by increasing use of AI-driven automation.
