https://cybertoolchain.io/tools/datadome New releases and features in DataDome, tracked by The Cyber Toolchain. en Tue, 03 Nov 2026 14:54:15 GMT https://docs.datadome.co/changelog/react-native-sdk-for-fetch-300 https://docs.datadome.co/changelog/react-native-sdk-for-fetch-300 Tue, 03 Nov 2026 14:54:15 GMT DataDome React Native SDK for Fetch 3.0.0 rewrites on top of CoreDataDome SDK, replacing the singleton API with createDataDomeFetch(dataDome) and native challenge presentatio⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Replace `DataDomeFetch` and the `DataDome` singleton (`DataDome.configure`, `DataDome.getInstance`) with createDataDomeFetch(dataDome), which takes a `DataDome` client created with new DataDome({ clientKey }) and returns a `fetch`-compatible function that automatically adds DataDome headers to every request and checks every response for a challenge.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Accept a `string`, `URL`, or `Request` as fetch input, and a `Headers` object, an array of pairs, or a plain object as headers. • Re-export `DataDome`, `ResponseValidationStatus`, `DataDomeConfiguration`, and `DataDomeCookie` from `@datadome/react-native-core-datadome`. • Return the server response as-is when the CoreDataDome SDK fails, so a DataDome error never blocks the app's request. • Rewrite the package in TypeScript. Breaking changes: • The package is renamed from `@datadome/react-native-datadome` to `@datadome/react-native-datadome-fetch`; update all imports and your package.json dependency. • `@datadome/react-native-core-datadome` is now a required peer dependency and must be installed alongside this package. • `DataDomeFetch`, `DataDome.configure`, and `DataDome.getInstance` are removed; replace them with createDataDomeFetch(new DataDome({ clientKey })). • The `datadome` per-request option is removed; the returned fetch function now applies DataDome headers and challenge checks to every request automatically. • `DataDomeModal`, `DataDomeModule`, and `enableVerboseLogs` are removed. • The `react-native-webview` peer dependency is removed; challenges are now presented natively by the CoreDataDome SDK. • React Native 0.85 or newer with the New Architecture is now required, along with iOS 15.1 or newer and Android API 24 or newer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/nodejs-module-270 https://docs.datadome.co/changelog/nodejs-module-270 Wed, 28 Oct 2026 08:28:19 GMT DataDome Node.js module 2.7.0 adds TLS fingerprint collection to enrich bot-detection signals⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • DataDome now collects TLS fingerprints from incoming requests to send richer bot-detection signals to the Bot Protect API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • DataDome now includes the `RequestMetadata` property in the TypeScript type definitions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/cloudflare-worker-rust-module-100 https://docs.datadome.co/changelog/cloudflare-worker-rust-module-100 Tue, 27 Oct 2026 10:01:37 GMT DataDome launches datadome-cloudflare-worker Rust crate, bringing native bot-protection to Cloudflare Workers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `datadome-cloudflare-worker` Rust crate for integrating DataDome bot protection natively inside Cloudflare Workers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/fraud-sdk-net-210 https://docs.datadome.co/changelog/fraud-sdk-net-210 Tue, 27 Oct 2026 08:24:30 GMT DataDome Fraud SDK .Net 2.1.0 adds optional `eventDate` field to set effective event time in payloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional `eventDate` field to the payload to specify the effective event time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/fastly-compute-rust-module-100 https://docs.datadome.co/changelog/fastly-compute-rust-module-100 Wed, 21 Oct 2026 13:37:05 GMT DataDome launches its first native Fastly Compute Rust crate, bringing bot-protection to Fastly edge deployments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the `datadome-fastly-compute` Rust crate, adding DataDome bot-protection support to Fastly Compute edge services.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/azion-module-100 https://docs.datadome.co/changelog/azion-module-100 Wed, 21 Oct 2026 13:32:04 GMT DataDome launches its Azion module 1.0.0, bringing bot and fraud protection to the Azion edge network.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds native DataDome bot and fraud protection integration for the Azion edge platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/fraud-sdk-java-310 https://docs.datadome.co/changelog/fraud-sdk-java-310 Wed, 21 Oct 2026 12:40:02 GMT Fraud SDK Java 3.1.0 adds optional `eventDate` field to supply the effective event time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional `eventDate` field to specify the effective event time when submitting fraud events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/android-sdk-310 https://docs.datadome.co/changelog/android-sdk-310 Wed, 21 Oct 2026 07:33:15 GMT DataDome Android SDK 3.1.0 adds predictive back support with configurable BackBehaviour on Android 13+.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for Android predictive back gesture via `BackBehaviour` enum (`BLOCKED`, `GO_BACKGROUND`, `GO_BACK`), honoured on Android 13+ when the app sets `android:enableOnBackInvokedCallback="true"` or targets API 36+.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Requires `androidx.activity` 1.6.1 and `compileSdk` 33 or higher. Breaking changes: • The SDK now requires `androidx.activity` 1.6.1 and apps must compile with `compileSdk` 33 or higher; projects on lower compile SDK versions will fail to build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/fraud-sdk-go-module-v210 https://docs.datadome.co/changelog/fraud-sdk-go-module-v210 Fri, 02 Oct 2026 09:54:04 GMT DataDome Fraud SDK Go v2.1.0 adds optional `eventDate` field for setting effective event time in payloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional `eventDate` field to the payload to specify the effective event time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/flutter-dio-sdk-350 https://docs.datadome.co/changelog/flutter-dio-sdk-350 Fri, 02 Oct 2026 09:10:34 GMT DataDome Flutter Dio SDK 3.5.0 adds Swift Package Manager support for iOS and an iOS privacy manifest.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Swift Package Manager (SPM) support for iOS native dependencies alongside existing CocoaPods support; apps on Flutter 3.44+ with SPM enabled resolve the plugin via SPM automatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an iOS privacy manifest (`PrivacyInfo.xcprivacy`) to the plugin. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/varnish-module-360 https://docs.datadome.co/changelog/varnish-module-360 Fri, 25 Sep 2026 08:05:30 GMT DataDome Varnish module 3.6.0 adds support for Varnish 8.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Varnish 8 support to the DataDome Varnish module.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/reference https://docs.datadome.co/reference Sun, 13 Sep 2026 14:52:42 GMT DataDome: Supports excluding static assets (e.g., `css`, `js`, `jpg`, `png`, `woff2`, `mp4`, `zip`, and 40+ other extensions) from DataDome processing to reduce unnecessary inspection overhead.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/reference https://docs.datadome.co/reference Sat, 12 Sep 2026 13:33:28 GMT DataDome adds static asset exclusion to skip processing of CSS, JS, images, media, and other non-dynamic file types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports excluding static assets (e.g., `avi`, `css`, `js`, `jpg`, `png`, `svg`, `mp4`, `woff2`, `zip`, and dozens more) from DataDome processing via an exclusion list.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/reference https://docs.datadome.co/reference Fri, 11 Sep 2026 14:51:18 GMT DataDome: Adds the ability to exclude static assets (e.g., `avi`, `css`, `js`, `jpg`, `png`, `svg`, `woff2`, `zip`, and 40+ other extensions) from DataDome processing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/reference https://docs.datadome.co/reference Thu, 10 Sep 2026 14:51:38 GMT DataDome adds static asset exclusion support, letting you skip CSS, JS, images, and other non-dynamic files from bot protection processing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports excluding static asset file types (including `avi`, `avif`, `bmp`, `css`, `eot`, `flac`, `flv`, `gif`, `gz`, `ico`, `jpeg`, `jpg`, `js`, `json`, `less`, `map`, `mka`, `mkv`, `mov`, `mp3`, `mp4`, `mpeg`, `mpg`, `ogg`, `ogm`, `opus`, `otf`, `pdf`, `png`, `svg`, `svgz`, `swf`, `tif`, `tiff`, `ttf`, `wav`, `webm`, `webp`, `woff`, `woff2`, `xml`, `zip`) from DataDome processing to reduce unnecessary inspection of non-dynamic content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/nginx-module-310 https://docs.datadome.co/changelog/nginx-module-310 Mon, 07 Sep 2026 15:16:22 GMT Nginx Module 3.1.0 adds tif, tiff, and pdf to static asset exclusion and adopts dynamic API-driven status codes. • Extends the static asset exclusion regex pattern to cover `tif`, `tiff`, and `pdf` file extensions, skipping DataDome checks for those requests. • Replaces hard-coded HTTP status codes with values sourced from DataDome Protection API response headers, enabling dynamic status code handling for upcoming features. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/reference https://docs.datadome.co/reference Fri, 28 Aug 2026 02:41:28 GMT DataDome API adds AcceptLanguage, Via, SecCHUAFullVersionList, and three CustomFieldString fields to its reference. • Adds `AcceptLanguage` field to the DataDome API reference for passing the request's Accept-Language header to the detection engine. • Adds `Via` field to the DataDome API reference for forwarding proxy chain information. • Adds `SecCHUAFullVersionList` field to the DataDome API reference for passing the `Sec-CH-UA-Full-Version-List` client hint header. • Adds `CustomFieldString1`, `CustomFieldString2`, and `CustomFieldString3` fields to the DataDome API reference for sending arbitrary custom string data alongside detection requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/tyk-module-140 https://docs.datadome.co/changelog/tyk-module-140 Mon, 24 Aug 2026 12:06:25 GMT DataDome Tyk module 1.4.0 adds GraphQL path detection and X-Forwarded-Host support. • Adds `datadome_graphql_endpoint` config option to define one or more paths (comma-separated) used to detect GraphQL requests, defaulting to `graphql`. • Adds `datadome_use_x_forwarded_host` config option to support host override via the `X-Forwarded-Host` header. • Adds support for 301/302 redirects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/envoy-module-280 https://docs.datadome.co/changelog/envoy-module-280 Fri, 21 Aug 2026 09:36:27 GMT DataDome Envoy module 2.8.0 adds GraphQL support. • Adds GraphQL support to the Envoy module. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/ios-sdk-for-alamofire-410 https://docs.datadome.co/changelog/ios-sdk-for-alamofire-410 Thu, 20 Aug 2026 13:41:39 GMT DataDome iOS Alamofire SDK 4.1.0 automatically merges DataDome cookies with manually added request cookies. • Adds automatic merging of the DataDome cookie with cookies manually added to a request inside `DataDomeInterceptor` instances. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/magento-module-12247 https://docs.datadome.co/changelog/magento-module-12247 Wed, 19 Aug 2026 13:07:41 GMT Magento module 1.2.247 adds the `datadome_enable_mcp_support` property. • Adds `datadome_enable_mcp_support` property to the Magento module configuration to enable MCP support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/openresty-module-170 https://docs.datadome.co/changelog/openresty-module-170 Tue, 18 Aug 2026 08:47:14 GMT DataDome OpenResty module 1.7.0 adds GraphQL endpoint and body-size config parameters • Adds `datadome_graphql_endpoint` configuration parameter to specify the GraphQL endpoint (defaults to `graphql`). • Adds `datadome_graphql_max_body_size` configuration parameter to limit the request body size parsed for GraphQL requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/nodejs-module-260 https://docs.datadome.co/changelog/nodejs-module-260 Mon, 17 Aug 2026 15:26:33 GMT DataDome Node.js module 2.6.0 adds a `graphQLEndpoint` parameter to designate GraphQL paths for bot protection. • Adds `graphQLEndpoint` parameter to specify the path(s) for the GraphQL endpoint, defaulting to `/graphql`. • Adds validation of the `logger` parameter to ensure it contains every required method with the correct signature. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/cloudflare-worker-module-270 https://docs.datadome.co/changelog/cloudflare-worker-module-270 Mon, 17 Aug 2026 09:49:56 GMT DataDome Cloudflare Worker 2.7.0 adds enriched request headers and configurable GraphQL/MCP endpoint parameters. • Adds `DATADOME_GRAPHQL_ENDPOINT` parameter to specify the GraphQL endpoint (defaults to `/graphql`). • Adds `DATADOME_MCP_ENDPOINT` parameter to specify the MCP endpoint (defaults to `/mcp`). • Adds enriched headers in context to enable log enhancement across all requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/go-module-v250 https://docs.datadome.co/changelog/go-module-v250 Tue, 28 Jul 2026 13:34:51 GMT DataDome Go module v2.5.0 adds a GraphQLEndpoint parameter to configure GraphQL path protection. • Adds `GraphQLEndpoint` parameter to specify custom GraphQL endpoint paths (defaults to `/graphql`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/google-cloud-load-balancer-module-170 https://docs.datadome.co/changelog/google-cloud-load-balancer-module-170 Tue, 28 Jul 2026 13:27:35 GMT DataDome's Google Cloud Load Balancer module adds configurable GraphQL endpoint path support. • Adds `GraphQLEndpoint` parameter to specify custom paths for the GraphQL endpoint (defaults to `/graphql`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/python-asgi-module-120 https://docs.datadome.co/changelog/python-asgi-module-120 Tue, 28 Jul 2026 09:18:09 GMT DataDome Python ASGI module 1.2.0 adds configurable MCP endpoint support and expands cookie length to 512 chars. • Adds `mcp_endpoint` attribute to `DataDomeMiddleware` to specify a custom MCP endpoint path (defaults to `/mcp`). • Increases DataDome cookie length limit from 128 to 512 characters to support future capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/envoy-module-270 https://docs.datadome.co/changelog/envoy-module-270 Tue, 21 Jul 2026 12:47:22 GMT DataDome Envoy module 2.7.0 exposes enriched headers as Envoy dynamic metadata for downstream logging. • Adds DataDome enriched headers to Envoy dynamic metadata, making bot-detection signals available for use in access logs and observability pipelines. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/fastly-compute-module-140 https://docs.datadome.co/changelog/fastly-compute-module-140 Mon, 20 Jul 2026 13:18:19 GMT DataDome Fastly Compute 1.4.0 adds MCP protocol support with HTTP message signature collection per RFC 9421. • Adds Model Context Protocol (MCP) support with new `datadome_mcp_endpoint` configuration parameter (defaults to `/mcp`) to specify the MCP endpoint. • Collects `Signature`, `Signature-Agent`, and `Signature-Input` headers to support HTTP message signatures as defined by RFC 9421. • Collects `Skyfire-Pay-ID` header from incoming requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/javascript-tag-590 https://docs.datadome.co/changelog/javascript-tag-590 Mon, 20 Jul 2026 09:25:19 GMT DataDome JS Tag 5.9.0 adds challengeType to event payloads and the displayDataDomeResponsePage function for style adaptation. • Adds `challengeType` parameter to event payloads, exposing the type of challenge triggered in downstream event handling. • Accepts `challengeType` in the `displayDataDomeResponsePage` function, enabling style adaptation based on the challenge type being displayed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/datadome-terraform-provider-v240 https://docs.datadome.co/changelog/datadome-terraform-provider-v240 Tue, 30 Jun 2026 14:28:06 GMT DataDome Terraform provider v2.4.0 adds rate limiting, time-box policies, agentic endpoint types, and new response actions for custom rules. • Adds `rate_limit` and `time_box` policy options for custom rules, enabling threshold-based and time-windowed enforcement. • Adds six new `endpoint_type` values for custom rules targeting agentic AI traffic: `agentic-general`, `agentic-account-creation`, `agentic-login`, `agentic-cart`, `agentic-forms`, and `agentic-payment`. • Adds three new `response` values for custom rules: `device_check`, `intent_based`, and `monetize`, expanding the range of enforcement actions available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome https://docs.datadome.co/changelog/ios-sdk-for-apollo-400 https://docs.datadome.co/changelog/ios-sdk-for-apollo-400 Tue, 30 Jun 2026 09:21:50 GMT DataDome iOS SDK for Apollo 4.0.0 adds support for Apollo v2. • Supports Apollo v2 GraphQL client for iOS, enabling DataDome bot protection on Apollo v2-based apps. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/datadome