Made with AIAI is challenging web service security: Lyyli is moving to invite-only registration for now
Mikko Oksanen
CEO & Co-Founder
Summary
- Bots that use the latest language models can bypass traditional identity checks, and Lyyli recently came under an automated attack.
In recent days, web services around the world have faced a new kind of AI-driven bot. These bots can bypass traditional login identity checks with unusual efficiency. Lyyli also came under this kind of automated attack. Because security comes first for us, we decided to respond quickly by making new account registration temporarily invite-only.
01Automated attacks are the new normal for web services
Continuously improving language models bring huge opportunities for organisational communications. At the same time they give new tools to those who try to load web services automatically. Bot attacks like this are becoming everyday reality for almost every open web service, and Lyyli is no exception. When we saw unusual traffic in new account creation, we took the service down briefly so we could keep the disruptive traffic out of the system.
02Customer data is safe
Made with AICustomer workspaces are isolated from each other. The attack targeted new account creation, not existing customer data.
I want to emphasise one point for our customers. No customer information, workspaces or content have been at risk at any stage. Lyyli was built from the start so that customer data and workspaces are isolated from each other behind strict access rights.
The only disruption customers saw was a short pause in daily work caused by the outage. We took the service down on purpose to protect the stability of the platform, and the situation was brought under control quickly. For paying customers, everyday work in Lyyli continues as normal.
The current description of security and workspace isolation is in the Trust Center.
03Lyyli is invite-only for now
Made with AINew accounts cannot currently be created directly from the website. An invitation is sent from person to person.
We have changed our registration process to prevent further automated attacks. New accounts cannot currently be created directly through our website. We have moved temporarily to a model where new users are admitted only through a separate invitation.
That does not mean we have stopped taking on new customers. Any communications professional who wants to try Lyyli or take it into use can still get an invitation to the platform. It only requires a small human step at the start of the process. We will restore open registration on our website as soon as we have confirmed that our access controls can filter these new kinds of attacks with the reliability we require.
If your organisation wants to try Lyyli or put communications workflow management on a firmer footing, email me or call. I will send you an invitation and I am happy to help your team get started.
Mikko Oksanen, CEO & Co-founder. mikko@lyyli.ai, +358 40 961 9224.
Want to try Lyyli?
New accounts are created by invitation only for now. Send a message and I will send an invitation and help your team get started.
- •An invitation to the platform
- •Help with getting started
- •Customer data has not been compromised
Read also
Made with AIEU AI ActHow does the EU AI Act affect municipal communications and text production?
The EU AI Act does not ban AI in municipal communications. It requires transparency, human review and secure tools instead of ad hoc experiments.
Made with AItrialUpdates to Lyyli trials and onboarding
We are tightening how trials start against bots: Starter is 14 days with a card, Professional is 30 days via a demo. Annual licences can still be paid by invoice.
Made with AIEuropean AIWhy choose European AI for communications?
Once AI becomes part of the communications workflow, generation quality is no longer enough. Security, data location and processing terms become strategic selection criteria.
Made with AIcommunications strategyWhy the communications strategy and brand guidelines stay as PDF documents
The communications strategy and brand guidelines easily stay as PDF files on a shared drive. Read how strategic goals and brand voice become part of the team's daily workflow.
Made with AImeeting communicationsFrom meeting to publication: How leadership decisions and expert knowledge become communications without duplicate work
The most important positions are formed in meetings, but the knowledge stays in notebooks and channel noise. Read how to turn meeting conversations into a direct workflow to publication.
Made with AIcrisis communicationCrisis communication starts before the first statement: How to build real capability in 2026
In a disruption the biggest challenge is not writing the text. It is balancing speed and certainty, reaching stakeholders in the right order, and keeping communications capable when the situation lasts.