Protect your platform from fraud, account takeovers, and suspicious activity with intelligent risk scoring, device fingerprinting, and real-time alerts — all through a simple REST API.
Three simple steps to protect every user action on your platform.
Send user actions — login, signup, payment, refund — via a single POST request. Include user ID, device fingerprint, IP address, and event details.
Our engine scores every event using device history, IP reputation, GeoIP anomalies, rate limits, velocity checks, and configurable thresholds.
Get back an instant decision — ALLOW, MFA_REQUIRED, or BLOCK — with optional webhook alerts and email notifications.
Enterprise-grade risk assessment without the complexity.
Identify known and unknown devices per user. Automatically detect new devices and flag suspicious access attempts.
Real-time IP reputation checks against known threat databases. Detect proxies, VPNs, and malicious sources instantly.
Detect anomalous location changes and block high-risk countries with configurable country-level rules.
Receive risk alerts instantly via HMAC-signed webhook payloads. Integrate with Slack, Discord, or your own stack.
Track your event volume, quota usage, and risk trends with a built-in dashboard. Automatic alerts at 75%, 90%, and 100% of quota.
Isolated environments for each of your clients or projects. Granular API keys, separate configurations, and independent usage tracking.
Try risk-free for 14 days with full access to all features. No credit card required.
Every event receives a risk score from 0 to 100. The score is calculated from device history (known/new device per user), IP reputation (malicious, proxy, VPN), GeoIP anomalies (impossible travel, high-risk countries), rate limits, velocity checks, and your custom threshold settings. Scores below the MFA threshold are allowed, above the block threshold are blocked, and everything in between triggers multi-factor authentication.
We collect only the data you send us: user ID, IP address, device fingerprint hash, browser and OS information, geolocation, and event type. We never store passwords, financial details, or personally identifiable information (PII) beyond what you explicitly send. All data is encrypted at rest and in transit.
Integration is straightforward — send a POST request to our risk assessment endpoint with the event payload. We return an immediate ALLOW / MFA_REQUIRED / BLOCK decision. The API Guide provides detailed documentation, request/response schemas, and code examples for popular languages including Python, JavaScript, and cURL.
Yes. All API traffic is served over HTTPS with TLS 1.3. API keys are hashed with SHA-256 and stored with Fernet symmetric encryption for recoverability. Event data is encrypted at rest. Webhook payloads are signed with HMAC-SHA256 so you can verify their authenticity. Security headers (CSP, HSTS, X-Frame-Options) are enforced on all responses.
Yes! SecureX is available as a Docker image that you can deploy on your own infrastructure. The self-hosted version includes all features with unlimited events, full administrative control, and no external dependencies. Ideal for organizations with strict data residency or compliance requirements.
Start your 14-day free trial — no credit card required. Set up in minutes.
Start Your Free Trial