Solutions / MSSPsObservatory /
Enrich customer alerts with consistent evidence.
Build a repeatable enrichment workflow without operating your own sensor network.
The job to be done
Assess customer alert IPs against the same observation source and record the evidence behind each decision. Discuss licensing and delivery requirements before building a customer-facing service.
What you get in five minutes
- Try an alert IP in Console → Lookup to assess the evidence available for your workflow.
- Review the REST schema and SIEM starter pack, then discuss your customer scope and delivery needs with us.
Every week
- Recheck customer alert infrastructure within key quotas and compare the resulting evidence in your own case system.
- Review organization usage and the weekly digest; refresh firewall candidates with expiry and customer-specific allowlists in your own deployment.
Put the evidence to work
- Lookup
- A consistent evidence format for individual IP/ASN enrichment through the Console or keyed REST.
- Integrations
- A firewall EDL with organization allowlists and a versioned SIEM starter pack to adapt to each deployment.
- Overview
- Review active organization API usage and manage its access through Console settings.
Choose the access you need
Professional supports evaluating full lookup evidence and feeds. Talk to us about Enterprise for higher quotas, bounded proprietary exports and customer delivery terms. API access alone does not grant redistribution rights.
Console → BillingStart with an observation.
Explore the free tiers, then choose the evidence and delivery your workflow needs.