Real-time intelligence on every signal.

100+ device and browser signals, plus IP, email, phone and behavioral intelligence, returned on every request in one API call.

CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve
CrexiHouzz ProManatalVyondAgorapulseSmartScoutBreaking Into Wall Streetiwd.ioSketchyTettraDesignfilesPrep101Cheddar UpNorth DataStealthWriterPharmAchieve

The engine

Three layers of intelligence, resolved on one request.

Identity, device and network are read together and returned as a single evaluation, so you are never stitching three vendors' answers into one decision.

1Identity

User identity intelligence.

Catch disposable emails, alias accounts, VOIP phone numbers and unverifiable identities before they reach your product. Every signup, login and sensitive action is scored against email reputation, phone carrier, line type and 20+ other identity signals.

Evaluation /Identity
Live

The identity behind the signup

iwanep636+2@esterace.com
Valid handle
Alias
Disposable
Phone+1 (234) 567-8900
Line typenon_fixed_voip
CarrierTwilio (VOIP provider)
Disposable emailYes

The device behind the request

Device typeComputer
OSmacOS 14.5
BrowserChrome 121
Emulatorfalse
Jailbrokenfalse
Browser fpfp_a8b9c7d6e5f4
User count1

The network behind the session

IP64.81.28.7
ASNAS15169 · Google LLC
VPNtrue
Proxyfalse
Datacentertrue
LocationSan Francisco, US
Impossible traveltrue
Bot riskHigh
identity signals
20+ identity signals
type and carrier
Line type and carrier
signup and login
Every signup and login

2Device

Device and browser intelligence.

Stable browser fingerprints, cross-browser device IDs, OS detection, emulator and jailbreak flags on every request. The same device ID follows the user across Chrome, Safari, Firefox and incognito, and survives a cookie clear.

Evaluation /Device
Live

The identity behind the signup

iwanep636+2@esterace.com
Valid handle
Alias
Disposable
Phone+1 (234) 567-8900
Line typenon_fixed_voip
CarrierTwilio (VOIP provider)
Disposable emailYes

The device behind the request

Device typeComputer
OSmacOS 14.5
BrowserChrome 121
Emulatorfalse
Jailbrokenfalse
Browser fpfp_a8b9c7d6e5f4
User count1

The network behind the session

IP64.81.28.7
ASNAS15169 · Google LLC
VPNtrue
Proxyfalse
Datacentertrue
LocationSan Francisco, US
Impossible traveltrue
Bot riskHigh
signals read
100+ signals read
integrity flags
6 integrity flags
cookies relied on
0 cookies relied on

3Network

Network, geo and risk intelligence.

VPN, proxy, Tor, hosting and datacenter detection, city-level geolocation, impossible travel and bot risk scoring. Layered with the other two, this is what gives away an account takeover: a correct password arriving on a device the account has never used, from a network it has never touched.

Evaluation /Network
Live

The identity behind the signup

iwanep636+2@esterace.com
Valid handle
Alias
Disposable
Phone+1 (234) 567-8900
Line typenon_fixed_voip
CarrierTwilio (VOIP provider)
Disposable emailYes

The device behind the request

Device typeComputer
OSmacOS 14.5
BrowserChrome 121
Emulatorfalse
Jailbrokenfalse
Browser fpfp_a8b9c7d6e5f4
User count1

The network behind the session

IP64.81.28.7
ASNAS15169 · Google LLC
VPNtrue
Proxyfalse
Datacentertrue
LocationSan Francisco, US
Impossible traveltrue
Bot riskHigh
level geolocation
City level geolocation
network flags
4 network flags
to a verdict
<1s to a verdict

The catalog

What 100+ signals actually look like.

Five families, read on the same request and handed back in one response. These are the field names your rules and your webhooks actually see, not a summary of them.

  • Device and browser

    A browser fingerprint with a confidence score, a cross-browser device ID, device vendor, model and type, and the integrity flags: is_emulator, is_simulator, jailbroken_ios, rooted_android, debugger_attached and ui_testing.

  • Network and geo

    ip, city, region and country_code, plus the four security flags resolved on every request: vpn, proxy, tor and hosting.

  • Email

    email_is_disposable, email_is_invalid, email_is_accept_all and email_is_webmail, alongside is_email_verified for the address on the account.

  • Phone

    Carrier and line type, so a non_fixed_voip number never passes as a real one, plus is_phone_verified for the number on file.

  • Behavior

    impossible_travel, concurrent_sessions, device_count broken out by computer, tablet and mobile, user_age_days, and event_count velocity grouped by user, IP or fingerprint.

Response /evaluation
application/json
{
"action": "login",
"verdict": "challenge",
"reasons": ["disposable_email", "vpn_detected", "impossible_travel"],
"geolocation": {
"ip": "64.81.28.7",
"city": "San Francisco",
"country_code": "US",
"security": {
"vpn": true,
"hosting": true,
"proxy": false,
"tor": false
}
},
"fingerprint": {
"id": "fp_a8b9c7d6e5f4",
"confidence": 0.97
},
"risks": [{
"name": "ato",
"severity": "high",
"score": 10,
"indicators": ["new_fingerprint", "new_ip", "impossible_travel"]
}]
}

Questions teams ask about device and IP intelligence:

See what one request already tells you.

Drop in the SDK, send a single evaluation, and read the device, email and network intelligence coming back on your own traffic before you challenge or block anything.