Skip to main content

Detect risky users
under any masking

Identify visitors and users, find risky users under any masking, detect bots and AI traffic, stop multi-accounting, account sharing and takeovers, and score traffic quality.

Five-minute integration with API and webhooks

User
User HIDe3b0…b924
RiskDANGEROUS
Linked devices2
Linked public IPs4
High-Risk Event
Multi-accountingHIGH CONFIDENCE
Latest identification
Device IDd290…0851
VPN+30
Anti-detect Browser+60
Risk Score90DANGEROUS

Detect risky users. Stop abuse of your product.

One integration gives you your users, devices, visitors and IPs with their risk, the four High-Risk Events, every risk signal and your traffic quality.

High-Risk Events

Multi-accounting, Account sharing, Impossible travel and Account takeover, detected on your users out of the box.
Multi-accountingAccount sharingImpossible travelAccount takeover

Users, devices, visitors and IPs

Link users to their devices, visitors and IP addresses. Review the current risk category of a user, device, visitor or public IP. The Device ID holds through cleared cookies, incognito mode and IP changes.
User HIDDevice IDVisitor IDPublic IPLocal IP

Risk Signals

Catch the masking and automation behind risky users, well beyond IP blocklists: VPNs, proxies, Tor, anti-detect browsers, bots and AI traffic.
VPNProxyTorAnti-detectBots+ more

Risk Scoring

Every identification gets a Risk Score from 0 to 100 with each risk signal named and weighted. Current user, visitor, device and IP risk summarizes the associated identification history.
0-100TrustedSuspiciousDangerous

Traffic Analytics

Score your traffic quality by channel, referrer and UTM campaign.
ChannelsReferrersUTMTraffic quality
Current analytics dashboard Overview with synthetic traffic, identity risk and account-event data.Current analytics dashboard Overview with synthetic traffic, identity risk and account-event data.

Current analytics dashboard Overview, rendered with synthetic example data.

Tour the analytics dashboard

Start by use case

Choose the evidence and response for your use case, then follow a complete runnable tutorial.
View all use cases

Protect your users

Account Takeover

Detect account takeover on the user. Step up before a sensitive action.

Credential Stuffing

Tell a spray of scripted logins apart from your real returning users.

Login and 2FA

Skip friction for known devices, step up only when a login looks risky.
Grow your revenue

New Account Fraud

Catch one device or local IP opening many fresh accounts at signup.

Promo Abuse

Stop multi-accounting from draining coupons and signup bonuses.

Account Sharing

Detect one account used from several distinct devices.

Paywall Enforcement

Recognize the same device through cleared cookies and incognito mode.

Regional Pricing

Catch VPNs and proxies used to reach a cheaper region’s price.

Returning Visitor

Recognize a trusted device on return and spare it repeated checks.
Protect your platform

Ban Enforcement

Keep a banned user’s device out, even when they come back with a fresh account.

Chargeback Dispute

Attach the account’s device and identification evidence to a disputed order.

Affiliate Fraud

Rank affiliate partners by the risky accounts and self-referred traffic they bring.

Traffic Quality

Grade each channel by the users and devices it brings and its traffic quality.

Checkout

Add friction at payment only when the buyer’s account or identification looks risky.

Built for easy integration

Identify visitors in your browser. Read risk results through the Server API or receive signed webhooks. Connect them to signup, login and checkout.

  • Identify users and devices with 99.9% identification accuracy
  • Works with React, Vue, Svelte, Angular, and plain JS
  • One ES module from cdn.shieldlabs.ai, loaded with a dynamic import
Read the snippet docs ›
  • Read every identification of one user, device, visitor or IP
  • Authenticate with the Private API Key from Integration > API keys in the analytics dashboard
  • Retrieve a stored identification by Identification ID
Read the Server API docs ›
  • Signed results delivered asynchronously to your backend
  • Verify X-Shield-Signature on the raw body
  • Bounded retries; deduplicate deliveries by event_id
Read the webhook docs ›

Keep going

Quickstart

Create your account, get your API key and identify your first visitor.

Troubleshooting

No webhook, no risk signals, or a Risk Score you did not expect? Start here.

Changelog

What shipped recently across the snippet, the Risk Score and the analytics dashboard.