Closing the Cyber Gap: Continuous Validation for Online Defences
Amsterdam, Monday 2 November 2026
With 37% of attack vectors initially bypassing enterprise defences, MazeBolt has integrated its automated validation platform into Akamai systems to continuously eliminate configuration gaps and safeguard critical digital infrastructure.
The Growing Vulnerability in Enterprise Cloud Perimeters
The rapid digitisation of modern enterprise architecture has made distributed denial-of-service (DDoS) mitigation an essential pillar of corporate stability, yet modern defences continue to show severe operational blind spots [GPT]. On 2 November 2026, automated DDoS testing vendor MazeBolt announced the launch of its native deployment capability for Akamai environments from Ramat Gan, Israel [1][2]. The integration of its RADAR platform targets an alarming industry trend: MazeBolt’s validation metrics reveal that approximately 37% of attack vectors successfully bypass deployed DDoS defences during initial testing within enterprise production environments [1][2]. As hybrid cloud architectures expand across key European hubs such as the Benelux region, enterprise scale-ups and established platforms face escalating exposures due to subtle misconfigurations rather than outright hardware failures [1][GPT].
Escalating Attack Vectors Outpace Periodic Testing
The nature of application-layer disruption is shifting significantly as malicious actors deploy artificial intelligence to orchestrate attacks [1]. According to Akamai’s 2026 Apps, APIs, and DDoS State of the Internet report, Layer 7 DDoS attacks surged by 104% between 2023 and 2025 [1]. Furthermore, data from Akamai’s May 2026 State of the Internet report highlighted that the median duration of global Layer 3 and Layer 4 DDoS assaults aimed at the financial services sector escalated by 738% compared to 2024 levels [1]. These aggressive multi-vector campaigns exploit the reality that enterprise infrastructure configurations are constantly altered to support agile software and artificial intelligence rollouts [1].
The Gap Between Deployed and Proven Defence
Despite the mounting threat landscape, audit frequency remains critically disconnected from enterprise risk exposure [1]. MazeBolt’s 2025 State of DDoS Defenses Survey, which assessed 300 banking, financial services, and insurance (BFSI) CISOs and security leaders, demonstrated that 86% of BFSI organisations evaluate their DDoS defences only once a year or less [1]. As John Grady, Chief Analyst at Omdia, noted, while sophisticated attacks dominate public headlines, misconfigurations, obsolete security rules, and inadequate coverage remain the primary cause of operational downtime incidents [1]. Matthew Andriani, CEO and founder of MazeBolt, emphasised that annual testing cannot keep pace with new microservices, leaving security teams without proof that their configurations can withstand dynamic attacks [1].
Automated Remediation and Multi-Cloud Coverage
To eliminate the reliance on infrequent audits, MazeBolt’s native Akamai integration introduces continuous validation across OSI layers 3, 4, and 7 without creating operational bottlenecks for engineering teams [1]. The RADAR platform tests protected services from within an enterprise’s own operational environment against known, AI-orchestrated, and AI-generated DDoS attacks, identifying configuration vulnerabilities so teams can proactively remediate them [1][2]. While tailored for Akamai deployments, the platform also delivers continuous cross-environment validation across major infrastructure and mitigation providers, including AWS, Cloudflare, F5, Microsoft Azure, NETSCOUT, and Radware [1]. As Eyal Rahimi, VP of Engineering at MazeBolt, pointed out ahead of his presentation at the European Transformational CISO Assembly on 3 November 2026, deployed security controls do not inherently equate to proven protection [1][2].
Regulatory Pressures Reshaping European Cyber Governance
The push toward continuous automated validation coincides with an increasingly rigorous European regulatory regime [2]. Under the EU Cyber Resilience Act, whose initial obligations took effect on 11 September 2026, manufacturers of products with digital elements marketed within the European Union must report serious security incidents and actively exploited flaws within 24 hours of discovery [2]. Full conformity mandates—including the acquisition of the CE mark—take effect roughly 14 months after this initial phase [2]. Against this backdrop of heightened regulatory scrutiny and prominent infrastructure disruptions, such as Canonical sustaining its second major DDoS attack of 2026 in October, financial institutions and platform operators are forced to replace passive baseline assumptions with ongoing, verifiable resilience [1][2].