Product review
Castle device intelligence review
Castle assesses devices and behavior around account actions, with risk scores and policies for account-abuse workflows. Its Risk/Filter requests and IP lookups consume different amounts from a shared API budget. That makes product selection and event volume central to both the integration and the cost comparison.
Editorial score
- Evidence layer
- Browser/device signals for account security
- Free access
- 5 US dollars API usage/month: up to 1,000 Risk API calls
- Paid entry
- Pro: 200 US dollars/month, including 40,000 Risk API calls
Key facts
- Identity and matching scope
- Event-based device/behavior risk and policy outputs for account actions. Vendor page ↗
- Result to inspect
- Device evidence, risk scores and policy outcomes Vendor page ↗
- Access and pricing
- 5 US dollars API usage/month: up to 1,000 Risk API calls. Pro: 200 US dollars/month, including 40,000 Risk API calls. Compare the actual plan, product and usage unit. Vendor page ↗
- Developer evaluation
- Evaluate known repeat visits and different browsers separately. Include cleared storage, privacy settings, browser upgrades, shared devices, missing collection and delayed results. Inspect the returned identifiers and reasons before connecting them to an account action. Vendor page ↗
Strengths
- Risk, automation and account signals are relevant to protected account events.
- Free usage supports a controlled API evaluation.
- Public documentation explains signals, metrics and policy integration.
Limitations
- IP-lookup allowances should not be counted as Risk API calls.
- History, operational tooling and throughput depend on the plan.
Who it fits
Developer-led account-security teams that need device context and configurable action policies.
Use the alternatives by integration model to compare hosted device identification, account-risk platforms and raw browser libraries.
What the score means
The 8.3 out of 10 score is an editorial assessment under the same 39-criterion, six-category framework. The rubric covers identity persistence, evasion resistance, risk output, fraud context, integration and evidence/access/privacy. The published scale runs from 0 to 10.
The award and score are distinct. Read all criteria and relative weights and verify the required signal and integration for your traffic.
How to evaluate it
Evaluate known repeat visits and different browsers separately. Include cleared storage, privacy settings, browser upgrades, shared devices, missing collection and delayed results. Inspect the returned identifiers and reasons before connecting them to an account action.
Free API allowance
Use the free allowance for a controlled Risk API evaluation; confirm retention and throughput before a larger pilot.
Open evaluation routeSources and further reading
- Product and detection approach · checked October 23, 2026
- Pricing and access · checked October 23, 2026
- Integration and result documentation · checked October 23, 2026
- Vendor guide or technical reading · checked October 23, 2026
FAQ
What does Castle return?
Device evidence, risk scores and policy outcomes. Castle uses device and behavioral evidence around account actions. Its API returns risk and policy context for signup, login and account-abuse workflows, with different billing units for Risk API calls and IP lookups.
Who should evaluate Castle?
Developer-led account-security teams that need device context and configurable action policies.
How can I try Castle?
Use the free allowance for a controlled Risk API evaluation; confirm retention and throughput before a larger pilot. 5 US dollars API usage/month: up to 1,000 Risk API calls. Pro: 200 US dollars/month, including 40,000 Risk API calls.