# Research at Castle

Our research investigates security, fraud, and bot detection through the lens of deep dive analysis and data science.

**Fingerprint harvesting in the bot ecosystem**  
Published  April 22, 2026  
Last revised  April 22, 2026  
[Antoine Vastel](/content/research/author/antoine-vastel/index.html)

This report uncovers how bot ecosystems harvest and reuse real browser fingerprints, including signals from commercial anti-bot systems, to scale realistic impersonation. These fingerprints are becoming operational assets, enabling more efficient and harder-to-detect automation. The implication is clear: detection systems must assume replay and treat client-side signals as untrusted.

[Read more](/content/research/fingerprint-harvesting-in-the-bot-ecosystem/index.html)

**BotmasterLabs: Powering an Era of Spam**  
Published  March 23, 2026  
Last revised  March 23, 2026  
[Antoine Vastel](/content/research/author/antoine-vastel/index.html), [Nicolas Sama](/content/research/author/nicolas-sama/index.html), [Naif Mehanna](/content/research/author/naif-mehanna/index.html), [Kurt Nistelberger](/content/research/author/kurt-nistelberger/index.html)

How XRumer and XEvil scaled forum spam by combining automation, CAPTCHA solving, and brittle fingerprinting.

[Read more](/content/research/botmasterlabs-powering-an-era-of-spam/index.html)

## Meet the team behind Castle's security research

**Antoine Vastel** - Browser fingerprinting, bot detection, web security  
 **Kurt Nistelberger** - Mobile security, reverse engineering, device signals  
 **Naif Mehanna** - Detection engineering, email intelligence, Hardware fingerprinting  
 **Nicolas Sama** - Obfuscation, codec architecture, anti-tampering

## Job Opportunities at Castle

- [**Device Fingerprinting Engineer**](https://app.dover.com/apply/Castle/5cafdffb-7244-419c-992a-e9f394f7fe58)  
  Build fingerprinting systems that survive spoofing, drift, and browser evolution.
- [**Detection Automation Engineer, Bot & Fraud Detection**](https://app.dover.com/apply/Castle/b2242eb0-98fb-4662-8ceb-1fd1df1c78eb)  
  Build detection systems that actually survive contact with attackers.
- [**Mobile Engineer**](https://app.dover.com/apply/Castle/832551b5-df5f-4317-a0d0-26ffb4bec160)  
  Build mobile SDKs that run reliably inside millions of devices.