We’ve made sending your event data to Verosint for fraud analysis even easier. You can stream your Auth0 logs directly to us and we will automatically process them. We created a handy guide to learn how to set this up for your account. https://docs.verosint.com/docs/log-file-ingestion

Introducing Fraud Insights!

These dashboards are designed to make it effortless to identify and prevent fraudulent activity among your user base, ensuring your platform remains secure and reliable.

With Fraud Insights, you'll be able to understand the habits and actions of fraudulent users at a glance, helping you prevent future occurrences of fraud. In addition, you can gather more information about specific users and their activities with detailed dashboards for each type of fraud we track. This data can be incredibly beneficial in identifying the root cause of fraudulent behavior and taking the necessary measures to prevent it from happening again.

Additionally, Fraud Insights will allow you to monitor the effectiveness of your prevention measures. By keeping an eye on the data and metrics provided by the dashboards, you'll be confident that your efforts to prevent fraud are working effectively.

Note: the new Fraud Insights dashboards have replaced the usage dashboard.

Risk score now available in our rules engine!

There is now a risk score for each of the identifiers, email, IP, and phone. Additionally, there is a handy blended score available for the whole event. You can use the score just like any other signal in the rules engine.

We added a few more handy signals for you as well!

  • Free Email -- Triggers any time there is an email detected from one of many known free email providers. Especially helpful for businesses wanting to restrict sign ups to non-free email domains.
  • Email Alias -- Triggers any time someone uses the username+1 style alias. This works across multiple providers and captures the most common alias styles such as +, - and .. This is a great way to keep users from referring themselves on your platform multiple times.

Removal of Custom Risk Policies

With the move to Risk Scores being available in rules, we've begun the deprecation of custom risk policies. As a result, you'll notice a few pages no longer in the app (Risk Scoring, Playground, and Evaluator).

The original risk score endpoint continues to be available while we transition current integrations

Published a number of bug fixes, security updates, and added new onboarding feature!

  • You can now upload a sampling of event data directly from the UI if you don't have any SignalPrint events! It's a great way to get started quickly without needing to build any integration 🎉
  • Improved the labeling on the Signals dashboard of some metrics to better reflect what the number represents
  • Squashed a number of bugs across the app, including in the rules editor, signals dashboard, and billing page.
  • Made various security updates

With the new date icon on the SignalPrint graph, you can filter which events you see by when they happened. It supports quick dates like today, yesterday or last week in addition to custom date ranges.

A few additional notes:

  • The tag filters will automatically adjust based on your date range, only showing you the tags on event data in your date range.
  • If you need to see everything again, just hit Clear to remove the filter

Some exciting improvements to share! 🎉

Improved Account Information Panel

The panel in the SignalPrint explorer now has clickable links for emails and IP addresses. The locations of the IP addresses are also displayed on map.

Additional Changes

  • Command-line interface has been updated to include signals in risk score evaluations.
  • Fixed an issue that affected domains in Spain for domain registration date signals.
  • The SignalPrint event ingestion endpoint has been updated to validate input parameters.

The 443id-cli has been deprecated due to naming changes and is replaced
with verosint. The former repository is no longer maintained and may be removed in the future.

The new tool is available from the Verosint CLI repository.

Users of the 443id-cli migrating to the new tool should note the following
changes:

  • The default configuration file name has changed to .verosint.yaml.
  • The environment variable for holding the API key has changed from
    CLI_APIKEY to VEROSINT_APIKEY.

🚀 Big releases this week!

  • Automated Signals bring you closer to automated fraud detection (no humans required 😉). Multiple Accounts, Account Sharing, Impossible Travel, and New Print are automatically generated and applied to account activity in your SignalPrint graph. You can filter on these automated signals too.
  • Tags are labels you can create and apply to your SignalPrint graph.
    • Creating a tag automatically adds it to an account node.
    • Tags only exist when they’re associated with account nodes. Once the last tag is removed, the tag is deleted from the SignalPrint graph altogether.
  • We've made it super easy to find your API Key so you can quickly get started!
  • The SignalPrint Graph in the UI has been updated and decorated with OSINT risk information! You'll see:
    • Email metadata and risk info (e.g., is this Email a Spam account? Breached in the last year? )
    • IP address location, metadata, and risk info (e.g., is this a Bot? VPN?)
    • Phone number metadata and risk info (e.g., is this phone number a DNO?)
  • You can also filter what you see in your SignalPrint Graph view by selecting signals in the Filter View module. For example, do you want to only see accounts and IP's that are bots? Select "Bot" from the Filter View.