DoYouSpain stays 100% available through attacks and protects bookings with Fastly

Key Results

• Maintained 100% availability during attacks that previously threatened service continuity. 

• Blocked malicious bots at the edge, lowering origin load and restoring confidence in analytics and ad metrics.

• Reduced false positives and alert fatigue with Next-Gen WAF policies tuned to DoYouSpain's traffic.

• Shortened investigation time with real-time visibility into attacks and bot activity.

The challenge

Founded in 2002, DoYouSpain is one of Spain's best-known car rental comparison platforms. Almost 18 million travelers have used it to compare offers from thousands of suppliers and book vehicles across the country.

Over the last two years, DDoS attacks, malicious bots, and automated traffic have increased sharply. Attacks occasionally took the site offline, and because customers expect to search and book at any hour, even short outages hit revenue directly. Bots added a second problem: fake traffic, heavier infrastructure load, and distorted advertising metrics.

"Every time we saw a spike in traffic that turned out to be an attack, we knew exactly what it was costing us: in lost bookings, in engineering time, and in the trust of customers who couldn't get to the site when they needed to," says Rafael Avila, CTO at DoYouSpain.

The solution

DoYouSpain needed better performance, clearer visibility into attacks, and automatic protection that wouldn't add operational complexity. Fastly delivered all three.

Automatic DDoS mitigation
Fastly DDoS Protection monitors traffic continuously and mitigates attacks automatically, before they reach customers. DoYouSpain no longer depends on manual intervention during an incident, so the team can trust the platform to hold when attacks hit suddenly.

Security tuned to DoYouSpain's traffic
Fastly's Next-Gen WAF gives DoYouSpain control over how threats are detected and handled. The team will configure policies around its own traffic patterns and risk profile, which blocks attacks more effectively while cutting false positives and alert fatigue.

Bots stopped before they reach critical systems
With Fastly Bot Management, DoYouSpain can identify, filter, and block malicious bots at the edge. Automated traffic no longer strains infrastructure or skews advertising performance, and the team can spend its time turning customer insight into better campaigns.

"Before Fastly, we couldn't always tell if a traffic spike was real demand or bots, which made it hard to trust our own numbers. Now that noise is filtered out at the edge, so what we see in our analytics is what's actually happening with our customers," says Rafael Avila.

Visibility that speeds up response
Real-time insight into incoming traffic lets the team spot threats early and act before users are affected. Less time goes into manually analyzing suspicious traffic, which frees the team for other priorities without loosening security controls.

A fast, reliable booking experience
Fastly's edge platform also improves site performance for DoYouSpain. In a competitive travel market, speed and availability drive revenue, and customers can search, compare, and book without disruption.

Key takeaway

DoYouSpain's mission is to be the quickest, easiest, and cheapest way to book a vehicle, which requires a platform that optimizes for security and performance. With Fastly, the company has achieved 100% availability during attacks that once put service continuity at risk, while reducing load on origin systems and protecting its advertising performance.

"Fastly gives us the confidence that our platform will hold up no matter what's thrown at it, so we can focus on growing the business instead of worrying about the next attack," says Rafael.