Evaluating Policies

The Policy Evaluator helps you determine which policy is right for your business when using the Risk Score API. Policy evaluation requires one or more identifiers, which must be formatted correctly:

Email: Emails should be formatted [email protected] with at least two characters for the domain name.

IP: Use non-private, routable IP addresses. Private, or non-routable IP addresses will return errors because they are typically internal to a local network.

Phone Number: Use the E.164 international standard.

• U.S. - 10-digit numbers, with or without a prefix (“+”) AND country code (“1”). For example, both 555-867-5309 and +1-555-867-5309 are valid U.S. numbers.

• Non-U.S. - Use the prefix "+" and country code for international numbers (such as +44 for the United Kingdom).

📘

Phone Number Formatting

You only need to include a prefix "+" and country code for non-U.S. numbers. Phone numbers with the traditional parenthesis, spaces, periods, and/or dashes are also valid.

Evaluating a Single User

To compare the risk scores of a single user across multiple policies:

1. Enter one or more identifiers for an account (email, IP address, phone number).
2. Select up to three policies.
3. Click Get Results to see the risk score based on selected policies.

You can edit selected policies by clicking the Edit icon next to that policy in the Policy Results box.

Evaluating Multiple Users

You can also evaluate policies to see which is best for your business by uploading a sample of users. To do this:

1. Create a CSV file with each row representing and account that includes one or more identifiers. Row one should include the headers (email, ip, phone-number).
2. To upload, drag the file, or click Browse to select it.
3. Select up to three policies.
4. Click Get Results.
5. Click Download CSV results for full details on the risk scores of your users, or click Print for a Policy Results document.

📘

CSV Formatting Tip

To avoid CSV upload errors, double check that row one includes the headers (email, ip, phone-number) and that identifiers are formatted correctly.

Understanding Results

For a single user, the risk score results are based on selected policies and how they are tuned. These results show you a numerical risk score as well as the risk level based on criteria in the policy.

For multiple users, the Policy Results box displays the following:

• A timestamp of when your users were scored. Scores will change over time if you tune a policy and/or we find new OSINT data on the identifiers provided.
• A chart that includes the distribution of users by score (“score curve”) for each policy evaluated. The bump(s) of a score curve means more users scored at that risk level.
• A breakdown of users by LOW, MEDIUM, and HIGH risk for each policy evaluated. If there is not enough information at the time to determine the risk score of a user, we will include the UNKNOWN label in the results too.