A burst of login attempts can hide a credential stuffing attack, in which bots test credentials leaked from other services to break into customer accounts, and an online catalog can be copied by automated requests that collect prices and stock at scale. Spotting this kind of traffic and deciding how to respond to it is part of protecting any application exposed to the internet.
DataDome, an Azion Marketplace partner, works in Bot and Agent Trust Management, a category that covers identifying, classifying, and governing bots and AI agents. It offers the DataDome Bot Protection integration to detect and mitigate these automated threats. With it, DataDome’s analysis becomes part of the request flow of applications protected by Azion’s Firewall.
Below, you’ll see which scenarios the integration covers, how DataDome and Azion connect on every request, and what you need to get started.
What the DataDome Bot Protection integration offers
Using artificial intelligence and machine learning, DataDome identifies and mitigates automated threats in real time, including risk categories described in the OWASP Automated Threats to Web Applications (OAT), such as credential stuffing, scraping, and automated layer 7 denial-of-service attacks. The solution also identifies other forms of automated abuse and protects websites, mobile applications, and APIs.
Each of these threats hits a different part of the application. Credential stuffing exploits password reuse to take over accounts, scraping automates the collection of content and business information, and layer 7 DDoS uses requests that look normal to exhaust the service’s resources. The integration places DataDome’s analysis at the point where this traffic arrives, before it reaches the application.
In The Forrester Wave™: Bot And Agent Trust Management Software, Q2 2026, Forrester named DataDome a Leader in the category, with the highest Current Offering score among the evaluated vendors and the highest possible score in 12 criteria. DataDome also publishes a comparison with other bot protection vendors.
For teams that deliver their applications through Azion, Marketplace offers a direct way to connect the two services, through a function that runs on the Firewall.
How DataDome and Azion work together
The integration connects DataDome’s request analysis to the controls Azion’s Firewall already applies. According to the integration guide, each request goes through three steps:
- Collection. The function gathers the request metadata, such as the IP address, User-Agent, headers, and cookies.
- Analysis. This data is sent to the DataDome API, which evaluates the request in real time, in under 2 milliseconds.
- Response. The request is allowed or blocked, or the user gets a challenge, based on DataDome’s response and the settings in the DataDome dashboard.
The setup uses a DataDome server-side API key, and the split of roles is clear in this flow: the analysis happens in the partner’s service, and the function on the Firewall applies that verdict to the request on Azion. Policies that have already been tuned stay in the DataDome dashboard.
The scope of the analysis is set by the Rules Engine for Firewall, where a rule defines which requests trigger the function, using criteria such as the domain. Each response is also recorded in Azion’s observability tools, where it can be inspected in Real-Time Events or sent to a SIEM through Data Stream.
To analyze this data with AI, connect an agent to Azion’s observability MCP server and ask, in plain language, for GraphQL queries over the events.
When to use the integration
Protect login against credential stuffing
On login pages, bots test username and password combinations from other services’ data leaks one after another, and every hit can become a compromised account. With DataDome Bot Protection applied to authentication routes, these attempts are identified before they reach the identity system and are blocked, or whoever makes them gets a challenge.
Mitigate content and price scraping
Catalogs, product pages, and APIs that expose prices and stock can be targets for automated collection by competitors. Because the Rules Engine defines which requests go through the analysis, DataDome can be applied precisely to the pages and routes that hold business information.
Respond to application-layer DDoS
Layer 7 attacks use application requests to consume resources and compromise service availability. This type of threat is within the scope of DataDome Bot Protection, and the response happens on the Firewall, before the requests reach the origin.
How to get started on Azion Marketplace
To use the integration, you need an Azion account, an application served by the platform, and a DataDome server-side API key.
Before turning on protection, define which domains and routes should be evaluated and review the policies in the DataDome dashboard. The installation guide walks through the setup in Azion Console step by step.
Find DataDome on Azion Marketplace
Azion Marketplace brings together partner integrations that add specialized services to the applications and firewall in your account, from bot and fraud protection to authentication and request validation.
DataDome Bot Protection is one of these options, built for companies that need to mitigate automated threats using DataDome with Azion’s Firewall. Explore Azion Marketplace and check the list of integrations to see the requirements for each one.
