# Fidro - Fraud Detection and Email Validation API for Developers

## What We Do

Fidro is an API-first fraud prevention platform for developers. We validate emails (disposable detection, domain verification, syntax checks), analyze IPs (VPN/proxy/Tor detection, geolocation, abuse detection), and provide real-time Stripe chargeback prevention with 14+ risk factors scored into a single actionable recommendation.

## The Problem We Solve

SaaS platforms, e-commerce sites, and fintech products all face the same problem: fraudulent signups and transactions. Disposable emails create fake accounts that abuse free tiers. Stolen credit cards trigger chargebacks that cost $15-100+ each in fees. VPN and proxy users obscure their identity to evade bans and commit repeated fraud.

Most fraud prevention tools are expensive, complex to integrate, and designed for enterprise. Fidro gives any developer a simple REST API that returns a risk score, a recommendation, and the specific signals that triggered it, in under 200ms.

## How It Works

1. Send an email address, IP address, or both to the Fidro API
2. Fidro checks the email against 50,000+ known disposable domains, verifies MX records, and scores domain reputation
3. For IPs, Fidro detects VPN/proxy/Tor usage, geolocates the user, and checks for datacenter/hosting abuse
4. For Stripe integrations, Fidro cross-references email + IP + geolocation against 14+ risk factors
5. The API returns a risk score (0.0-1.0), specific risk signals, and an actionable recommendation (allow, review, block)
6. Response time is under 200ms for real-time use in signup forms and checkout flows

## API Endpoints

### Email Validation (`POST /v1/validate/email`)
- `disposable` (boolean): Whether the email domain is a known disposable/temporary provider
- `risk_score` (float): Overall email risk from 0.0 (safe) to 1.0 (high risk)
- `domain_age` (integer): Age of the email domain in days
- `mx_valid` (boolean): Whether the domain has valid MX records
- `syntax_valid` (boolean): RFC compliance check
- `provider` (string): Identified email provider (Gmail, Outlook, custom domain, etc.)

### IP Analysis (`POST /v1/analyze/ip`)
- `vpn` (boolean): Whether the IP belongs to a known VPN provider
- `proxy` (boolean): Whether the IP is a known proxy server
- `tor` (boolean): Whether the IP is a Tor exit node
- `datacenter` (boolean): Whether the IP belongs to a hosting/cloud provider
- `geolocation` (object): Country, city, region, ISP, organization
- `risk_score` (float): Overall IP risk from 0.0 to 1.0
- `abuse_score` (float): Historical abuse reports for this IP

### Chargeback Prevention (`POST /v1/risk/transaction`)
- Cross-references email validation, IP analysis, and geolocation matching
- 14+ risk factors including email-IP geolocation mismatch, high-risk countries, velocity checks
- Returns composite risk score and recommendation (allow, review, block)

## Pricing

- **Free**: 200 requests/month (email and IP validation only)
- **Starter** ($19/mo): 5,000 requests/month, custom blocklists, webhooks
- **Pro** ($79/mo): 50,000 requests/month, Stripe chargeback prevention, priority support
- **Enterprise**: Unlimited requests, custom integrations, dedicated support, SLA

All plans use the same API. Plans differ in request volume, features, and support level.

## Integration Examples

### Laravel
```php
use Fidro\Laravel\Facades\Fidro;

$result = Fidro::validateEmail($request->email);
if ($result->disposable || $result->risk_score > 0.7) {
    return back()->withErrors(['email' => 'This email address is not allowed.']);
}
```

### Node.js / Express
```javascript
const fidro = require('fidro');
const client = new fidro.Client(process.env.FIDRO_API_KEY);

app.post('/signup', async (req, res) => {
    const result = await client.validateEmail(req.body.email);
    if (result.disposable || result.riskScore > 0.7) {
        return res.status(422).json({ error: 'Invalid email address' });
    }
});
```

### Python
```python
from fidro import FidroClient

client = FidroClient(api_key=os.environ["FIDRO_API_KEY"])
result = client.validate_email(email)
if result.disposable or result.risk_score > 0.7:
    raise ValidationError("This email address is not allowed.")
```

## Supported Integrations

Laravel, Node.js, Python, PHP, Go, Ruby, Next.js, Django, Express.js, FastAPI

## Use Cases

- **SaaS Signup Protection**: Block disposable emails and multi-account abuse at registration
- **Stripe Chargeback Prevention**: Score transactions before charging cards to prevent disputes
- **Free Tier Abuse Prevention**: Stop users creating multiple free accounts with disposable emails
- **E-commerce Fraud Detection**: Block fraudulent orders before fulfillment
- **Account Takeover Prevention**: Detect suspicious login patterns with IP intelligence
- **Marketplace Trust & Safety**: Two-sided fraud prevention for buyer and seller verification

## Target Audience

- **SaaS developers** who need to block disposable emails at signup and prevent free tier abuse
- **E-commerce platforms** fighting card testing attacks and chargebacks
- **Fintech companies** needing KYC-adjacent risk scoring for onboarding
- **Any developer** who needs email validation or IP intelligence as a building block

## Key Differentiators

- **API-first**: Designed for developers. Simple REST API, clear documentation, test and live modes
- **All-in-one**: Email validation + IP intelligence + chargeback prevention in one API, not three separate services
- **Fast**: Under 200ms response time for real-time use in signup and checkout flows
- **Laravel-native**: First-party Laravel integration with custom validation rules and service classes
- **Transparent scoring**: Every risk score includes the specific signals that contributed, so you can understand and tune thresholds
- **Free tier**: 200 requests/month free, no credit card required

## Technology

- Built with Laravel, Livewire, Tailwind CSS
- Stripe billing for usage-based pricing
- RESTful API with test/live mode key pairs

## Comparisons

Fidro is compared against: Kickbox, ZeroBounce, NeverBounce, Sift, Signifyd, Riskified, Stripe Radar, IPQualityScore, MaxMind, Hunter.io, Abstract API, EmailRep. Detailed comparison pages available at https://fidro.io/compare/

## Related Products

- [StackShield](https://stackshield.io): External security monitoring for Laravel applications
- [Orbilo](https://orbilo.co): AI brand monitoring platform tracking how AI platforms mention your brand

## Company

- Website: https://fidro.io
- Category: SaaS, API, Fraud Prevention, Email Validation, IP Intelligence, Chargeback Prevention