Why retail success hinges on more than bargains

RETAIL organisations spend several months preparing for the holiday season – and many tell me it is becoming harder every year.

For most retailers, the holiday season can make or break the year. In Singapore alone, total retail sales in December 2024 amounted to S$4.6 billion, with a growing amount of those transactions taking place online. Today, e-commerce accounts for 59 per cent of retail transactions, according to Statista.

But revenue isn’t won at the point of click; it’s lost in moments of friction. Slow, insecure or unreliable sites don’t just frustrate consumers, they drive them away. Speed, security and availability have become non-negotiable as more shoppers turn to their smartphones. Every second of delay or lapse in security risks abandoned carts, eroded trust and lost sales.

The pressure is mounting

Retailers face a perfect storm of surging Internet traffic, tighter resources and increasingly sophisticated cyberattacks. Artificial intelligence (AI)-enhanced attacks, from hyper-personalised phishing messages and deepfakes to autonomous ransomware, can severely disrupt operations and cost millions in revenue.

At the same time, legitimate traffic is spiking. Even a hundred-millisecond delay during peak periods can push shoppers to a competitor. A recent study by tech company Yottaa also showed that pages which take more than four seconds to load experience a bounce rate of 63 per cent.

The first step: Securing the online storefront

In today’s high-stakes online marketplace, retailers must be prepared for the most prevalent and potentially damaging e-commerce attacks.

Bots now do more than scrape content. Criminals use automated bots to test stolen passwords against customer loyalty accounts. A successful attack allows them to drain reward points or use saved credit cards for fraudulent purchases, turning your most loyal customers into victims and causing reputational damage.

An advanced bot management service can help distinguish good bots (such as search engine crawlers) from bad ones.

Meanwhile, the sheer scale of distributed denial-of-service attacks demands cloud-based protection delivered through a network with tremendous capacity. Some of the largest attacks today generate several terabits of traffic every second, far more than any organisation’s website could handle alone.

Routing that traffic through an enormous network, however, absorbs that malicious traffic without affecting website availability or user performance.

Ransomware, increasingly fuelled by AI, is best met with layered resilience. Besides strengthening email security to prevent phishing and adopting multifactor authentication, retailers should adopt a “zero trust” approach, which assumes any user or device could be compromised at all times. Zero trust architecture builds internal walls that prevent hackers from moving freely through a network to find sensitive data, even if they manage to steal an employee’s password.

And, underpinning everything, data protection must move beyond compliance to become a business differentiator. End-to-end encryption, protecting sensitive transaction and customer data, and network segmentation to isolate sensitive data, not only keep regulators satisfied but also reinforce customer confidence in transacting with a brand.

Next: Deliver the experience that closes the sale

Shoppers expect frictionless experiences across every channel. Despite rising security risks, they want to be able to browse for items on their mobile phones, add to cart, and make the purchase all within a few clicks.

For retailers, meeting this expectation goes beyond layering on new features; it’s about rethinking infrastructure as a competitive differentiator.

Before jumping to solutions, retailers should be asking themselves:

• How do we protect the value of customer loyalty programmes and data from increasingly sophisticated cyberattacks?
• How do we ensure our digital storefront stays open, fast and secure, even at peak holiday traffic?
• How can we use personalisation at scale to drive loyalty and revenue, without compromising performance or security?
• How do we break down silos between online and offline channels to deliver a seamless omnichannel journey?

To deliver on these imperatives, retailers need to ensure their infrastructure can flex with demand. This can mean scaling in-house systems or tapping into cloud services to handle peak shopping periods without performance slowdowns.

Delivering this to customers may require trial and error ahead of the year-end shopping season. Therefore, retailers should prioritise platforms that empower developers to leverage AI models to create personalised buying experiences, including customised offers and loyalty programmes, while surfacing insights that deepen understanding of the customer journey.

Importantly, the right platform should also enable a business to scale up customer support and infrastructure efficiently as demand peaks.

Leveraging an application programming interface (API)-first development approach can help bridge online and offline operations, providing more seamless omnichannel experiences for shoppers.

However, this can’t be done in isolation. Security teams need to be deeply embedded in the process to protect against API-based attacks. Without the right architecture, life-cycle management and security oversight, APIs can become an easy entry point for cybercriminals.

When evaluating cloud services, retailers should look for integrated platforms that offer automated application scaling. This will reduce the complexity of juggling multiple vendors, ensure new capabilities can be rolled out securely, and remove the operational scramble to meet holiday demand.

Singapore’s year-end shopping season is no longer just about discounts or inventory. It’s about delivering low-latency, secure and seamless experiences at scale.

The retailers that ask the right strategic questions today – and invest accordingly – will be the ones that are best positioned to capture sales, protect their reputation, and win lasting customer loyalty when it matters most.

The writer is vice-president, Asean, at Cloudflare