Subscribe
Sign in
Sqreen
p/sqreenThe protection module for your web applications
Start new thread
Nicolas Grenié

Sqreen API - A security toolbox for developers

by•

The Sqreen API allows you to tap into our extensive knowledgebase to discover security risks hiding in your own data. Find out whether that email address is from an anonymizing service, or that IP address is a Tor exit point. You can even find out if the address has been implicated in a past security attack.

Add a comment

Replies

Best
Don Goodman-Wilson
Maker
Howdy Product Hunt! And Thank you @picsoung! I'm Don, developer advocate at Sqreen. We're excited to be launching the Sqreen API, which allows you to tap into our extensive database of malicious actors and activity to make your apps more secure and safer for your users. The two endpoints we are releasing today allow you to tap into Sqreen's extensive database of bad actors and malicious behavior to discover whether an email or IP address poses a risk to your app. These endpoints can answer questions like: • Does that email address originate with an email anonymizer? • Is that IP address a Tor exit node? • Where is this user on the map? • Has this user ever been implicated in a known attack in the past? Use this information to flag or screen signups to your service, to detect if unusual activity is originating from a suspicious address, and to generally arm yourself with additional risk assessment when you need it. You can get started by creating an account if you don't have one, and either creating a new Developer Sandbox or using the API key assigned to your existing apps in Sqreen. https://my.sqreen.io/new-applica... Once you've got an API key, head over to the documentation to see how to get started quickly. https://doc.sqreen.io/reference Of course, we'll be watching here for your feedback and comments!
Nicolas Grenié
Hunter
The awesome Sqreen team just released a really nice product using their security knowledge and best practices. With Sqreen API you just need to make 1 API request sending an email address or an IP address, and it will let you know if it belongs to a fraudster. It's really easy to integrate to your signup page for example. Definitively a good way to protect your app from attackers :) Good job! I have also added Sqreen API to "Made in 🇫🇷" collection.
Jice Lavocat
Hi Sqreen / Don, This API seems so useful... thanks for the release. Just to clarify a bit more, what's the 'risk_score' exactly? If I want to implement the API on my site and block real bad guys, is there a suggested threshold? Or should I block anyone above 0?
Don Goodman-Wilson
Maker
@jice_lavocat Thanks for the question. This is our own subjective analysis of whether you should trust this address to behave nicely. It ranges from 0 to 100. I would start flagging addresses at around 50 or so, and outright banning at 80. Scores of 10–30 are usually nothing to worry about, but might be worth keeping tabs on as they use your app. I'll update the documentation to reflect this—thanks for the feedback!
Pierre Betouin
Maker
@degoodmanwilson @jice_lavocat Risk score is dynamically computed from IP properties (TOR, Open Proxy, ...), Date/Time, and attacks detected by our community. If an attack is detected from this source, attack type, duration, intensity are taken into account to raise the risk score accordingly. For instance, a source performing basic security scan will have a lower risk score than a source performing account takeover attacks or stressing web applications to look for SQL injections.
Shubham SHARMA
So excited to test this new API by Sqreen ! Love the doc btw ;)
Don Goodman-Wilson
Maker
@shub_s thanks! And we hope the docs will only get better as we keep working on them.
Matthieu Varagnat
Opsec teams are the modern times unsung heroes. Sqreen makes it really easy to do it well!
Matthieu de Luze
Another awesome product, congrats guys 👊
Pierre Betouin
Maker
@matthieudeluze Thanks Matthieu! ;-)
Paolo Perazzo
Looks awesome @degoodmanwilson! Can't be anything but great if you are part of it 😉. Congrats on the launch!
Don Goodman-Wilson
Maker
@sivola You are too kind Paolo!
PE Lieb
This looks very impressive, will definitely have a look :) Congrats guys !
Don Goodman-Wilson
Maker
@pedward_lieb Thank you for the kind words! Let us know what you think!
Razvan Ilin
Sounds like an awesome product! Definitely looks like one. Will probably give it a go if my project takes off 👍
Sarim Haq
Just curious, how did you guys come up with those scores? Really useful product btw 👍
Don Goodman-Wilson
Maker
@sarim_haq Thank you! Risk score is dynamically computed from IP properties (TOR, Open Proxy, ...), Date/Time, and attacks detected by our community. If an attack is detected from this source, attack type, duration, intensity are taken into account to raise the risk score accordingly.
Gregg Housh
This is just begging for a WordPress plugin. Do you have one in the works?
Don Goodman-Wilson
Maker
@gregghoush not yet, but it is certainly something that we've been thinking about! Thanks for the suggestion!
Arnaud Breton
Congrats Sqreen team on the release! I'm super excited to see this product released after having had great discussions with the team few weeks back. The value prop is straightforward and I can imagine ton of use-cases. Looking forward to see what's next
Brandon Anzaldi
Super excited to see more emphasis on security for devs. Awesome product! Curious how this would affect end users who are also security researchers, such as myself. E.g. If a company has both Sqreen, and a bug bounty program, but they aren't necessarily blocking malicious users. I know I'm a bit of an edge case, but it's got me curious!
Don Goodman-Wilson
Maker
@caffeinewriter it's difficult to say to be honest. Would love to talk more concrete details. Feel free to DM me on Twitter and we can dive deep into your question.