Imperva > Case Studies > LeoVegas Enhances Mobile Gaming Security and Performance with Incapsula Imperva

LeoVegas Enhances Mobile Gaming Security and Performance with Incapsula Imperva

Technology Category

Cybersecurity & Privacy - Security Compliance
Robots - Wheeled Robots

Applicable Industries

National Security & Defense
Telecommunications

Applicable Functions

Quality Assurance
Sales & Marketing

Use Cases

Traffic Monitoring
Transportation Simulation

Services

Testing & Certification

About The Customer

LeoVegas is a mobile gaming company that has grown rapidly since its founding in 2011. The company's vision is to create the best gaming experience and to be number one in mobile gaming. Through its website, LeoVegas offers sports betting, dozens of slots, casino, and live table games to more than 4000 players on average every day. With product development and tech teams in Sweden and licensed operations in the UK and Malta, LeoVegas has plans for expansion into new markets. As the company expands, it is committed to improving the security, availability, and performance of its website, and to meeting the regulatory compliance requirements of each new market.

The Challenge

LeoVegas, a rapidly growing mobile gaming company, was committed to creating the ultimate mobile gaming experience for its players. This commitment involved ongoing efforts to improve the security, availability, and performance of its website, which directly impacted the company's bottom line. A key business requirement was reducing the risk of a DDoS attack against the website, a prevalent issue in the gaming industry often initiated by disgruntled players. Although LeoVegas had not yet been targeted, the company believed it was only a matter of time given its growth and industry position. To protect against service disruption, LeoVegas sought an always-on DDoS mitigation solution that would not add latency to overall website performance. As the company expanded into more countries and markets, regulatory compliance became a top concern. Each country required more audits and had different compliance issues that needed to be addressed. LeoVegas required a security solution that could support automated compliance reports and meet PCI-level standards. Additionally, the company sought a solution that could provide better visibility into its website traffic for marketing purposes.

The Solution

LeoVegas began searching for a solution to address its security and operational needs. After researching leading products, consulting with its distributor, and having conversations with potential vendors, LeoVegas found the Imperva Incapsula team to be the most responsive and professional. The company decided to proceed with a trial evaluation of the Incapsula product. Despite encountering some onboarding issues related to SSL certificates, these were quickly resolved with the help of the Incapsula support team. Today, LeoVegas uses the Incapsula service in live operations to accelerate and protect the leovegas.com website. The solution includes the Content Delivery Network (CDN), Web Application Firewall (WAF), and always-on Website DDoS Protection products. All traffic is routed through the Incapsula network, which automatically identifies and filters out DDoS attacks, malicious bots, and exploit attempts before they reach the LeoVegas site. Since deploying the Incapsula service, LeoVegas has seen an improvement in website performance.

Operational Impact

The implementation of the Incapsula service has brought multiple benefits to LeoVegas. The company has enhanced its security with always-on protection against DDoS attacks and the blocking of exploit attempts using the Incapsula WAF. The solution has also improved website performance, with developers reporting better response times. In terms of traffic analysis, Incapsula has provided a granular view of website traffic, distinguishing between human visitors and automated bots. This has enabled LeoVegas' marketing team to optimize its affiliate-based campaigns. Furthermore, the Incapsula WAF is Level 1 PCI-certified, providing the auditing and reporting capabilities required in various markets, making it a compliance-friendly solution.

Quantitative Benefit

Improved website performance with better response times after onboarding Incapsula
Enhanced security with always-on protection against DDoS attacks and blocking of exploit attempts
Better visibility into website traffic, providing valuable input for marketing campaigns