Catch Free Trial AbusersBot AccountsFake SignupsTrial CyclersDisposable UsersBefore They Cost You
We score every signup against 267 signals across network, browser, behavior plus identity, and you get one clean verdict back, allow or review or block.
{ "verdict": "block", "score": 0.94, "reasons": [ "tor_exit_node", "disposable_email", "canvas_hash_seen_47x" ], "signals": 267}
Trusted by anti fraud teams
Stop trial abuse at signup before it costs you a single dollar.
Trusted by anti fraud teams
Stop trial abuse at signup before it costs you a single dollar.
Everything the fraud team builds in house, ready off the shelf.
One API call gives you back a verdict, a score plus the 267 signals that produced it.
Signal Engine267 signals
Every signal is computed in house across network, browser, behavior plus identity, and scored live in under 80ms.
Device FingerprintTLS plus Canvas
Identity that survives cleared cookies, incognito sessions plus VPN rotation, all of it together.
Threat Intel12M IPs
Tor exit nodes, cloud ranges, residential proxies plus disposable email domains, all refreshed hourly for you.
Rules EngineNo code
Compose verdicts from any signal you choose, and test on shadow traffic before you ship to production.
WebhooksSigned
Push verdicts to billing, ops plus SIEM with HMAC signing, retries on failure and full observability the whole way.
API Keys and RolesSOC2 Type II
Project scoped keys with viewer, operator plus admin roles, and a full audit log on every single check.
See the exact signal that flipped the verdict.
Every check returns 267 signals instead of just a score, so you can replay any decision or audit any user months later. Trace the verdict back to the network ASN that flagged it, the TLS fingerprint we matched against the rest of your traffic or the canvas hash that tripped your rule. No more black box vendors asking you to trust their numbers on faith.
Check
chk_3p9k…2a1
Verdict
block
Latency
42ms
Signals
267
Top signals
- criticaltor_exit_node+0.42
- criticaldisposable_email+0.31
- highcanvas_hash_seen_47x+0.18
- highasn_known_proxy+0.14
- mediumjs_clock_skew+0.08
- lowplan_velocity_24h+0.05
Built for teams that know trial fraud is not a fingerprint problem.
We do not sell a single ID, we sell a verdict that is composed from network, browser, behavior plus identity signals together. The whole thing is scored under 80ms at the edge. You get a rules engine, shadow mode, signed webhooks plus a full audit log on day one, so you wire it once then move on with your roadmap.
Recent checks
live · 12,431 today| Verdict | Latency | |
|---|---|---|
| a.morgan@gmail.com | allow | 31ms |
| jay+12@tutamail.com | block | 38ms |
| rosa@protonmail.com | allow | 28ms |
| t.b.cycler@10minute.io | block | 51ms |
| p.lange@stripe.com | allow | 26ms |
| free_trial_42@yopmail | block | 47ms |
| mira@figma.com | review | 35ms |
Allow
78.2%
Block
14.5%
Review
7.3%
Pricing
Pay per request. No seats. No feature tiers.
One signal set. One verdict format. Pick a plan by how much signup traffic you protect each month.
Starter
For early stage products validating signup quality on the way to product market fit.
50 checks per week included
Get started- 1,000 check API calls each month
- 267 signals on every verdict
- 7 day signal retention window
Starter includes
- Browser SDK plus REST API access
- Threat intel for Tor, cloud plus disposable email
- One project paired with one environment
Pro
Most popularFor growing SaaS teams running real trial flows day in and day out.
2,500 checks per month included
Get started- 2,500 check API calls each month
- Rules engine paired with shadow mode
- 30 day retention with webhooks included
Everything in Starter, plus
- Custom rules tested in shadow mode
- Signed webhooks streaming to billing or SIEM
- Up to five projects with role based access
Business
For scaled products that want dedicated infrastructure plus a real SLA on every verdict.
10,000 checks per month included
Get started- 10,000 check API calls each month
- Dedicated infrastructure plus SLA
- 12 month retention, bring your own storage
Everything in Pro, plus
- Single tenant deployment option
- SOC2 Type II report alongside a custom DPA
- Named CSM with 24/7 incident response
For custom enterprise solutions contact us now so we can scope volume, deployment plus SLA against your traffic.
FAQ
Common questions
Everything teams ask before the first integration call.
Every one of our 267 signals is computed, scored plus stored by us in house, so you can see the exact signal that flipped any given verdict. Replay it any time you want.
We do not build cross customer profiles at all. Tellr returns a verdict plus a score that are both scoped to your project key. Your signals stay against your project only, with no cross customer enrichment or resale of the data anywhere.
P50 sits at roughly 30ms while P95 stays under 80ms from both the US plus EU edges. Threat intel hits Redis in line, and new sessions hit a TLS fingerprinting Go proxy followed by a Fastify scorer.
You absolutely can. The rules engine is no code, supports shadow mode out of the box plus exposes every signal as a typed condition. Promote any rule to live once you trust how it performs against your real traffic.
You set the failure mode per project on day one. Allow on error tends to work best for high volume signup flows while block on error works better for billing. Our SLA is 99.99% on the check API itself.
Still curious? Talk to us.