Stop fraud and abuse on your SaaS platform.

Rupt detects and prevents seat sharing, repeat free trials, fake & spam signups, and other abuses that drain your revenue and ruin your product.

CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve
CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve

Fraud drains your revenue. Rupt helps you recover it.

Agorapulse and Crexi both sell seats. Both found revenue sitting in accounts they were already serving.

How Agorapulse uncovered $1M+ in ARR lost to account sharing

$1M+

ARR found in shared seats

Read the story SaaS

How Crexi stopped sharing without the friction it feared

“They saw it as a feature, not friction.”

Read the story Data & Marketplaces

How StealthWriter doubled its growth rate by monetizing sharers

2x

Growth rate after Rupt

Read the story AI
Trust booster #001

One device opened 400 accounts in 30 days

400

Accounts from one fingerprint

Read the story SaaS platform

How Sketchy stopped a ring making 120,000 fake accounts over the API

51x

Peak day signups vs normal

Read the story Subscription platform

Sketchy converted 20% of sharers in the first 3 months

20%

Of sharers converted in 3 months

Read the story E-learning

Coverage

Build once and protect your product forever.

Rupt evolves to cover all types of in-product fraud and abuse: seat sharing, repeat trials, fake signups, and more, all handled for you, end-to-end. Set up a policy that fits your product and you are covered.

Seat sharing

Detect seat sharing and convert it into revenue.

  • Detect shared seats, and how many people share them.
  • Gently nudge sharers without disrupting legitimate users.
  • Grow revenue by turning sharers into happy, paying users.

Agorapulse found $1M+ in ARR sitting in shared seats and recovered hundreds of thousands of dollars in new ARR.

Read the Agorapulse story
More on account sharing
Accounts /ana@acme.com
Live

Sessions

MacBook ProChrome 141Berlin, DE
iPhone 15 ProSafari 18Berlin, DE
Windows 11Chrome 141Likely used by a separate personSão Paulo, BR
Galaxy Tab S9Chrome 141Likely used by a separate personManila, PH

Signals

Impossible travel
Concurrency
Device limit
Then Challenge and cap devices
People detected
3 people
Devices
4 devices
Confidence
97% confidence

Linked accounts

Catch multiple signups by the same person.

  • Link signups by multiple signals, not just email or IP.
  • Survives cleared cookies, new emails and incognito.
  • Stop trial abuse, referral abuse, and multi-accounting.

One actor opened about 400 accounts in 30 days. Every one shared a device.

Read the breakdown
More on multi-accounting
Signups /k.rivera@proton.me
Live

This signup

Emailk.rivera@proton.me
Password and card hashesNever seen before
Browser profileNew, private window
IP addressVPN, new country
Device signatureSeen 2 times before

Same device

j.reyes@gmail.comTrial ended Mar 2
jreyes.dev@outlook.comTrial ended Mar 16
k.rivera@proton.meSigning up now

Reset on every attempt

Email aliasNew address
Password and card hashesNo match
IP addressNew country
Cookies and storageCleared

Same on every attempt

Canvas and WebGL8 of 8 match
System fonts and screen14 of 14 match
CPU and hardware profile6 of 6 match
Math and CSS behavior11 of 11 match

Verify this phone number

Confirm a phone number to finish creating your account.

+1 415 555 0182 On 2 accounts

Challenges today

k.rivera@proton.meNumber already on 2 accounts
t.okafor@gmail.comVerified a new number
sam.q+9@mail.coLeft without verifying
d.lang@northwind.coVerified a new number
accounts linked
3 accounts linked
free trial
3rd free trial
confidence
99% confidence

Fake and spam signups

Stop fake accounts and bots from ruining your product.

  • Score signups on email, phone, network, device, and more.
  • Catch disposable emails, VoIP numbers, datacenter IPs, bots and headless browsers.
  • Real customers clear every check and never see a challenge.

A ring made 120,000 fake accounts by calling the signup API directly, past domain blocking, IP blocking and email 2FA. Device signals stopped it.

Read the breakdown
More on fake accounts
Signups /qx7e2k@tmpmail.io
Live

Email

DomainDisposable
MailboxUnreachable

Phone

NumberValid
Line typeVoIP

Network

IPDatacenter
ReputationAbuse reports

Device

BrowserHeadless
History312th signup

Signals

Disposable email
Datacenter IP
Headless browser
Then Block
Signups screened
312 screened
Signups flagged
311 flagged
Confidence
99% confidence

Account takeover

Keep stolen passwords out of paid accounts.

  • Learn the devices and networks each account really signs in from.
  • Challenge unknown logins with a hosted email or SMS check.
  • Deny credential stuffing and protect your customers from account takeover.

A correct password on a device the account has never used, from a network it has never touched, is the signature of a takeover. Rupt reads all three.

Read the guide
More on account takeover
Logins /user_8fa2
Live

Trusted for this account

MacBook Pro, ChromeSeattle · 41 logins
iPhone 15, SafariSeattle · 12 logins
24.18.44.x, ComcastSeattle · Home network
172.58.x.x, T-MobileSeattle · Mobile network

Just now

Windows, Chrome 141Frankfurt · VPN

New device, new network, impossible travel

Then Challenge

Challenge, run by Rupt

Owner asked to verifyEmail and SMS
Ownership provenNever completed
Automation on the formPlaywright
Attempts from this device47 in 6 min
Accounts it tried12
Real ownerNever interrupted
Then Denied

Your policy

Whenlogin

impossible_travel is true

oris_new_fingerprint and is_new_ip

orip_is_vpn is true

Thenchallenge via email, sms

Signals it can draw on

Device intelligenceIP intelligenceBehaviorEmailAccount history
trusted devices
2 trusted devices
trusted networks
2 trusted networks
login flagged
1 login flagged

Integration

Ridiculously simple to integrate.

Install the SDK and call a function on the action you want protected, or call the API from your server. Everything after that is configurable via AI or the policy editor, with no release from you.

1import Rupt from "@ruptjs/client";
2
3const rupt = new Rupt({
4  clientId: "your_client_id",
5  on_logout: () => signOut(),
6});
7
8await rupt.evaluate.access({
9  user: user.id,
10  email: user.email,
11  phone: user.phone,
12});
ReactNext.jsVueNuxtiOSAndroid Read the quick start

Revenue impact

How much are you losing to fraud and abuse?

Move the sliders to your own numbers. Customers typically see up to 25% revenue increase within 90 days of switching prevention on.

10,000
$49

Account sharing

15%

Extra people per account

Average conversion when nudged

Repeat trials

1,000
15%

Trial conversion rate

Added ARR*

+$723,240

~$60,270 / month

Account sharing
+$58,800/ month
Repeat trials
+$1,470/ month
Converted users
1,230+
ARR uplift
+12%

*Estimated from your inputs. The defaults are customer averages. Send us yours and we will work out a custom estimate.

Book a demo

Get this report by email

We will send you this estimate with the numbers you set.

Questions SaaS teams ask before turning Rupt on:

Find out how many seats you are really selling.

Rupt measures from the first session. Crexi had a full diagnosis within a couple of days of installing, long before it challenged or blocked a single seat.