Kasada Review: Sydney-Founded Bot Defence and AI Fraud Prevention

Verdict (TL;DR): Kasada is the real thing — a sophisticated, ML/AI-powered bot defence platform founded in Sydney and now operating globally. Its AI is central, not cosmetic: the platform detects automated threats in real time without CAPTCHAs, and was named a Leader in the Forrester Wave for Bot and Agent Trust Management in Q2 2026. The catch is cost and fit: enterprise-only pricing puts it well beyond most Australian SMBs. This is a tool for mid-market and enterprise digital businesses — retailers, airlines, financial services, media, SaaS — not a café or consultancy.

Score: 19/25 — ⭐⭐⭐⭐ Very Good

Last reviewed: 26 June 2026 by Adam.

What Kasada is

Kasada is an Australian-founded cybersecurity company specialising in bot detection, mitigation, and automated threat management. It was founded in 2015 by Sam Crowther, who built early experience battling bots at one of Australia's largest banks before setting up shop in a shipping container under the Sydney Harbour Bridge.

The company has since grown into a global operation, headquartered in Sydney with hubs in New York, Boston, Melbourne, and San Francisco. It raised $20 million in a round led by EQT in late 2025, bringing total funding to over $50 million (including IQT, Main Sequence — part of the CSIRO — Reinventure, TenEleven, and former Prime Minister Malcolm Turnbull's investment vehicle).

In June 2026, Kasada was named a Leader in the Forrester Wave: Bot and Agent Trust Management, Q2 2026 — a meaningful independent endorsement.

The product suite covers: - Kasada Bot Defense — the core product: ML/AI-powered detection and mitigation of automated threats across websites, APIs, and mobile apps - Kasada AI Agent Trust — newer product managing the risk of AI agent traffic (distinguishing legitimate AI agents from malicious ones) - Account Intelligence — detects human-driven fraud and account abuse that pure bot detection misses - KasadaIQ for Fraud — threat intelligence layer providing deeper visibility into attacker behaviour

Kasada's core use cases include: account takeover prevention, API protection, checkout fraud, content scraping prevention, fake account creation, and CAPTCHA replacement.

Notable Australian customers visible on the Kasada website include REA Group, Officeworks, Sportsbet, and Coles Group. Flybuys (loyalty scheme) is also a public case study.

What it costs in Australia

Kasada does not publish standard pricing. Pricing is custom, based on traffic volume and business requirements. You need to request a quote via kasada.io/get-started. — Wayback 19 May 2026

Kasada's enterprise positioning means cost is typically out of scope for small businesses. Based on public market intelligence, enterprise bot defence solutions of this calibre start at five figures annually (USD) and scale up significantly with traffic volume. (Kasada does not publish pricing; treat as directional only.)

Kasada is also available on the AWS Marketplace, which may provide procurement convenience for businesses already working within AWS contracts.

The Forrester Total Economic Impact study (2026) found a 200% ROI when enterprises switched from legacy bot protection to Kasada, including savings in chargeback fees, infrastructure costs, and fraud overhead. Kasada cites $200,000 in daily chargeback savings and $1 million in monthly account verification/SMS cost reductions for example customers — figures that are only meaningful at enterprise scale.

How it works in practice

Kasada is implemented via a JavaScript tag (web), iOS/Android SDK (mobile apps), or a no-code managed proxy option. It also supports NPM packages for CDN edge functions. Integration is designed to be fast — the managed proxy option requires no code changes at all.

Once live, Kasada's invisible client runs on the user's device and evaluates hundreds of signals — browser behaviour, device characteristics, network patterns — in real time. Crucially, it does not ask users to solve CAPTCHAs. Legitimate users see nothing different. Bots are challenged or blocked silently.

Kasada's differentiator is its adversarial research practice. Rather than relying purely on static signatures or rules that attackers can reverse-engineer, Kasada studies attacker behaviour, tooling, and motivations. Its defences are dynamic and obfuscated — the challenge presented changes each time, making it extremely difficult for attackers to build a stable bypass.

The Kasada AI Agent Trust product (newer, 2025–2026) addresses a specific emerging problem: as AI agents become more common, businesses need to distinguish legitimate agents (their own, or trusted third parties) from malicious automated actors claiming to be agents. This is a genuinely novel problem and Kasada is one of the few vendors with a dedicated product for it.

What it does well

The AI is the product, not a feature. Kasada's ML/AI is not a dashboard overlay on top of rules-based detection. It is the detection mechanism. Real-time signal processing, dynamic obfuscation, and adversarial modelling are all ML-driven. This is categorically different from legacy WAFs or CAPTCHAs.

No CAPTCHAs. This sounds minor but it is not. CAPTCHAs degrade conversion rates, frustrate legitimate users, and are increasingly solvable by AI anyway. Kasada's invisible approach protects without friction.

Genuinely Australian in origin. Kasada was founded and built in Sydney. Its research team understands Australian attacker ecosystems, and it serves major Australian brands. The company holds a Great Place to Work certification in Australia (2025). This is not just a global vendor with an AU flag — it was born here.

AI Agent Trust is timely. The rise of agentic AI (tools like autonomous AI systems browsing the web on users' behalf) creates real ambiguity about what traffic is "human" and what is "bot." Kasada is ahead of most competitors in having a product specifically for this problem.

Enterprise-grade track record. REA Group, Coles Group, Officeworks, Sportsbet, Hyatt, Wizz Air — these are not small deployments. Kasada handles real-scale production traffic for serious businesses.

Forrester Wave Leader, Q2 2026. Independent analyst recognition in the specific category Kasada operates in is meaningful. Most bot management vendors do not achieve Leader status.

What it doesn't do well

Price excludes most Australian businesses. Kasada is enterprise software with enterprise pricing. A Melbourne retailer with $5 million in annual online revenue cannot realistically afford Kasada — and Kasada is not trying to serve that customer. If you are a small or medium business, look at Cloudflare Bot Management, AWS WAF, or Imperva as lower-cost alternatives.

No self-service or transparent pricing. Everything goes through sales. For procurement-averse or budget-constrained buyers, this is a friction point. You cannot trial Kasada without a sales conversation.

Not a full security suite. Kasada does not do endpoint protection, SIEM, vulnerability scanning, penetration testing, or compliance management. It does one thing — stop automated threats — and does it extremely well. Australian businesses need to pair it with other security tooling for full coverage.

Australian SMB market effectively out of reach. The majority of Australian businesses that would benefit from bot protection cannot afford it. Kasada's AU customer base skews toward ASX-listed companies and large digital businesses, not the small-to-medium operators that form the core of the AI Directory's readership.

GenAI abuse is a newer, still-evolving product. The AI Agent Trust product launched in 2025–2026 and addresses an important problem, but the space is moving fast. Buyers evaluating this specific capability should ask Kasada about roadmap and current client case studies.

Australian fit

Kasada scores well here with some nuance. The company is Australian-founded, Sydney-headquartered, and actively serves major Australian enterprise customers. Its threat research capability incorporates knowledge of Australian fraud ecosystems. The company's Great Place to Work AU certification signals genuine local presence, not a nominal HQ.

Pricing is in USD (enterprise quotes), not AUD — which is standard for global enterprise security software but worth noting. GST would apply to Australian purchases; verify with Kasada's finance team on enterprise contracts.

Data processing and residency: Kasada's infrastructure handles significant volumes of real-time web traffic globally. Australian businesses with data sovereignty requirements should confirm with Kasada whether request data is processed or stored outside Australia (confirm with Kasada directly for your use case).

The Kasada AI Agent Trust product is particularly relevant to the Australian market as Australian businesses increasingly deploy AI agents — the OAIC (Office of the Australian Information Commissioner) is actively watching AI-driven data access, and the ability to distinguish legitimate agents from malicious ones has compliance implications beyond security.

Alternatives

Darktrace — UK-founded AI cybersecurity with AU presence, covering network detection, email security, and AI-driven threat hunting across a broader surface area than Kasada. Complementary rather than competitive — Kasada focuses on web/API bot defence; Darktrace is a broader AI security platform. Review: /review-darktrace-australia-2026-06-13.

Airlock Digital — Australian application whitelisting / allowlisting for endpoint and server protection. Different problem set (controlling which software can run) vs Kasada (stopping automated web threats). Both AU-founded; serve different layers of the security stack. Review: /review-airlock-digital-australia-2026-06-07.

Huntress — Managed detection and response (MDR) for SMBs, with AU partner channel. More accessible pricing than Kasada; different threat surface (endpoint/identity vs web bot traffic). Review: /review-huntress-australia-2026-06-07.

Bottom line

Kasada is one of the best bot defence platforms in the world — and it was built in Sydney. For Australian enterprises that depend on digital channels (ecommerce, ticketing, loyalty programmes, banking, media), automated bot traffic is a real and costly problem: account takeovers, inventory scraping, checkout fraud, fake account creation. Kasada addresses all of these with ML/AI that is genuinely sophisticated, invisible to real users, and hard for attackers to bypass.

The AI is not a buzzword here. The Forrester Wave Leader recognition is not accidental. This is a platform where the machine learning is the moat.

The honest limitation for most readers of this publication: Kasada is not for you unless your organisation operates significant digital infrastructure. It is enterprise software at enterprise prices. For the Australian businesses it does serve, it is excellent.

Who it's for: Mid-market and enterprise Australian businesses in ecommerce, financial services, travel, media, gaming, and SaaS that face automated threats at scale.

Who should look elsewhere: Small businesses, micro-enterprises, and anyone without dedicated security budget and developer resources for integration.

Score

Rating: ⭐⭐⭐⭐ Very Good

Value for Money (2/5) reflects enterprise-only USD pricing that excludes most Australian SMEs. Raw 19/25 with Australian Fit 4/5 sits at four stars — the 5★ Excellent gate requires raw ≥21, so it is not met.

Frequently asked questions

Is Kasada an Australian company?

Yes. Kasada was founded in Sydney in 2015 by Sam Crowther and is headquartered there, with additional offices in Melbourne, New York, Boston, and San Francisco. Australian investors include Main Sequence (part of CSIRO) and Reinventure, and it serves major Australian brands including REA Group, Coles Group, Officeworks, and Sportsbet.

How much does Kasada cost for Australian businesses?

Kasada does not publish pricing. It offers custom enterprise pricing based on traffic volume and requirements — contact Kasada at kasada.io/get-started for a quote. It is also available on the AWS Marketplace. Pricing is typically in USD and is enterprise-tier; it is not a cost-effective solution for small businesses.

What is Kasada AI Agent Trust and why does it matter?

Kasada AI Agent Trust is a product that helps businesses distinguish between legitimate AI agents (such as their own AI tools or trusted third-party agents) and malicious automated actors that present themselves as AI agents to bypass security. As AI-driven automation becomes more common, this is an increasingly important security and compliance challenge — particularly for businesses with sensitive APIs or customer data.

Sources

1. Kasada homepage — https://www.kasada.io/ (accessed 26 June 2026) — Wayback 2 July 2026
2. Kasada About Us — https://www.kasada.io/about-us/ (accessed 26 June 2026) — Wayback 13 June 2026
3. Kasada Bot Defense product — https://www.kasada.io/bot-defense/ — Wayback 13 July 2026
4. Kasada AI Agent Trust product — https://www.kasada.io/ai-agent-trust-management/ — Wayback 13 June 2026
5. Kasada Account Intelligence product — https://www.kasada.io/account-intelligence/ — Wayback 19 May 2026
6. Kasada press release: "$20 Million Round to Accelerate Global Expansion" — https://www.kasada.io/kasada-secures-20-million-round-to-accelerate-global-expansion-and-broaden-platform-offerings/ — Wayback 13 June 2026
7. Forrester Wave: Bot and Agent Trust Management, Q2 2026 — https://www.kasada.io/reports/2026-forrester-wave-leader-bot-and-agent-trust-management/ (Kasada-hosted; primary for citation; full Forrester report behind paywall) — Wayback 6 September 2026
8. Forrester Total Economic Impact of Kasada 2026 — https://www.kasada.io/reports/2026-total-economic-impact-of-kasada/ — Wayback 13 June 2026
9. SecurityWeek: "Kasada Raises $20 Million for Anti-Bot Expansion" — https://www.securityweek.com/kasada-raises-20-million-for-anti-bot-expansion/ (⭐⭐ Secondary — used for funding context) — Wayback 5 March 2026

The AI Directory Australia is an independent editorial publication. We don't accept payment for positive reviews. Read our Methodology and Affiliate Disclosure.