How does Spur integrate with our existing technologies (Cloudflare, etc.)?
Many customers integrate Spur intelligence into web security, fraud prevention, and access control workflows. Available integration methods may vary depending on the platform and use case.
Many customers integrate Spur intelligence into web security, fraud prevention, and access control workflows. Available integration methods may vary depending on the platform and use case.
Cloudflare has capabilities for Tor and bot management, and Spur integrates directly at the Cloudflare edge through the Policy API to add a deeper layer of attributes specific to proxies and anonymized services that these platforms don't focus on. It's a complementary fit that helps clients get more value out of existing solutions without replacing them.
Similar questions
Why do nation-state actors use residential proxies and VPNs?
Nation-state actors often use anonymization infrastructure to conceal their origin, blend into legitimate traffic, distribute activity across many locations, and evade traditional detection methods. Residential proxies are particularly effective because they route traffic through legitimate consumer networks.
Can Spur IP intelligence help detect nation-state activity?
Spur can provide valuable context about anonymization infrastructure, infrastructure ownership, behavioral patterns, and risk indicators that help analysts identify activity that warrants further investigation.
How does Spur IP intelligence complement existing perimeter security tools?
Perimeter tools such as WAFs, SIEMs, XDRs, IDS/IPS platforms, and threat intelligence feeds are highly effective at detecting known threats and suspicious activity. Spur IP intelligence adds infrastructure context, helping analysts understand whether traffic originates from residential proxies, VPNs, hosting providers, mobile proxies, or other anonymized environments.
Can Spur integrate with SIEM, SOAR, TIP, and security platforms?
Yes. Many organizations integrate Spur intelligence into security operations workflows, including SIEM, SOAR, threat intelligence, fraud prevention, and trust and safety platforms.
Does Spur integrate with Microsoft Sentinel?
Yes. The Spur: IP Intelligence and Enrichment solution, available on the Microsoft Marketplace, enriches public IP addresses on Microsoft Sentinel incidents using the Spur Context API. For the full installation, configuration, and troubleshooting walkthrough, see the Microsoft Sentinel integration guide.
Related guides & explainers
How Spur IP Classifications Work: Observed Behavior, Not IP Ownership
Spur classifications describe what was observed happening on an IP during a given window, not who owns the IP or ASN — a key distinction when investigating a classification that looks wrong.
Fastly No-Code Integration
Connect Monocle to your Fastly service without writing any code. Monocle deploys and manages a Compute service that enforces your policy at the edge.
What "Client Proxies" Means in Spur Data
"Client Proxies" in Spur data describes proxy-network activity Spur observed coming from an IP — it does not mean the IP is owned or operated by the listed provider.
Troubleshooting Sign-in, SAML and SSO
Can't sign in to Spur? Work through the common causes: how sign-in works, corporate email checks, password resets, finding your organization, and SAML single sign-on.