Enterprise

Choose how to receive intelligence

Use Feeds when you need snapshots for a warehouse, notebook, or scheduled import. The feed documentation covers available streams, snapshot metadata, Parquet files, and checksum verification. Build around the published schema and retain the snapshot timestamp so downstream consumers know which export they are using.

Use Firehose when your system needs to consume observations as a stream. Its documentation covers live events and NDJSON consumption. Plan for connection loss and your own processing capacity before connecting the stream to a production decision system.

Use Helios to investigate captured HTTP, TLS, DNS, and Android Debug Bridge activity. These records provide evidence about traffic observed by the honeypot network. Their fields and interpretation differ from a bulk list of proxy addresses.

Plan an integration

Confirm the required access scopes and account access before implementing a consumer. Review rate limits and error handling for the endpoints you will use. The CLI is a useful starting point for inspecting metadata and downloading an initial snapshot.

Keep provider attribution and observation times alongside the data you ingest. Read the methodology and risk scoring guidance before deciding how long observations should influence your policies. Contact support with your intended workflow if you need help selecting an access path.