Made with AIAI is challenging web service security: Lyyli is moving to invite-only registration for now
Mikko Oksanen
CEO & Co-Founder
Summary
- Bots that use the latest language models can bypass traditional identity checks, and Lyyli recently came under an automated attack.
In recent days, web services around the world have faced a new kind of AI-driven bot. These bots can bypass traditional login identity checks with unusual efficiency. Lyyli also came under this kind of automated attack. Because security comes first for us, we decided to respond quickly by making new account registration temporarily invite-only.
01Automated attacks are the new normal for web services
Continuously improving language models bring huge opportunities for organisational communications. At the same time they give new tools to those who try to load web services automatically. Bot attacks like this are becoming everyday reality for almost every open web service, and Lyyli is no exception. When we saw unusual traffic in new account creation, we took the service down briefly so we could keep the disruptive traffic out of the system.
02Customer data is safe
Made with AICustomer workspaces are isolated from each other. The attack targeted new account creation, not existing customer data.
I want to emphasise one point for our customers. No customer information, workspaces or content have been at risk at any stage. Lyyli was built from the start so that customer data and workspaces are isolated from each other behind strict access rights.
The only disruption customers saw was a short pause in daily work caused by the outage. We took the service down on purpose to protect the stability of the platform, and the situation was brought under control quickly. For paying customers, everyday work in Lyyli continues as normal.
The current description of security and workspace isolation is in the Trust Center.
03Lyyli is invite-only for now
Made with AINew accounts cannot currently be created directly from the website. An invitation is sent from person to person.
We have changed our registration process to prevent further automated attacks. New accounts cannot currently be created directly through our website. We have moved temporarily to a model where new users are admitted only through a separate invitation.
That does not mean we have stopped taking on new customers. Any communications professional who wants to try Lyyli or take it into use can still get an invitation to the platform. It only requires a small human step at the start of the process. We will restore open registration on our website as soon as we have confirmed that our access controls can filter these new kinds of attacks with the reliability we require.
If your organisation wants to try Lyyli or put communications workflow management on a firmer footing, email me or call. I will send you an invitation and I am happy to help your team get started.
Mikko Oksanen, CEO & Co-founder. mikko@lyyli.ai, +358 40 961 9224.
Want to try Lyyli?
New accounts are created by invitation only for now. Send a message and I will send an invitation and help your team get started.
- •An invitation to the platform
- •Help with getting started
- •Customer data has not been compromised





