CINXE.COM
Oort Use Case & Review - IPinfo.io
<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, user-scalable=no"/><title>Oort Use Case & Review - IPinfo.io</title><meta name="description" content="Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo."/><link rel="canonical" href="https://ipinfo.io/customers/oort"/><meta property="og:url" content="https://ipinfo.io/customers/oort"/><meta property="og:type" content="website"/><meta property="og:title" content="Oort Use Case & Review"/><meta property="og:description" content="Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo."/><meta property="og:image" content="https://ipinfo.io/static/images/og_logo.png"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@ipinfo"/><meta name="twitter:title" content="Oort Use Case & Review - IPinfo.io"/><meta name="twitter:image" content="https://ipinfo.io/static/images/og_logo.png"/><meta name="twitter:description" content="Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo."/><script type="application/ld+json">[{"@context":"https://schema.org","@type":"Organization","url":"https://ipinfo.io","logo":"https://ipinfo.io/static/images/og_logo.png"},{"@context":"https://www.schema.org","@type":"Article","headline":"How Oort optimizes identity threat detection and response with IPinfo","url":"https://ipinfo.io/customers/oort","image":"https://ipinfo.io/static/images/layout/logo.svg","description":"Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo.","articleBody":"Oort needed to gather more context to separate suspicious logins from authorized account users. Their team of data scientists required insights that could be used immediately to develop and test highly tuned detections for Oort’s customers.\n\nIn particular, geolocation context is an important parameter for Oort’s customers, allowing them to detect suspicious activity to improve risk monitoring and inform decisions. Their customers also wanted more information about VPN usage to enforce organizational policies regarding commercial VPNs.","mainEntityOfPage":"https://ipinfo.io/customers/oort","datePublished":"16 June 2023","dateModified":"16 June 2023","author":{"@type":"Person","name":"Didi Dotan"},"publisher":{"@type":"Organization","name":"IPinfo","legalName":"IPinfo Inc.","logo":{"@type":"ImageObject","url":"https://ipinfo.io/static/images/layout/logo.svg","width":"150"}}}]</script><meta name="next-head-count" content="16"/><meta charSet="utf-8"/><meta name="apple-itunes-app" content="app-id=917634022"/><link rel="manifest" href="https://cdn.ipinfo.io/static/manifest.json"/><link rel="icon" sizes="48x48" href="https://cdn.ipinfo.io/static/deviceicons/android-icon-48x48.png"/><link rel="icon" sizes="96x96" href="https://cdn.ipinfo.io/static/deviceicons/android-icon-96x96.png"/><link rel="icon" sizes="192x192" href="https://cdn.ipinfo.io/static/deviceicons/android-icon-192x192.png"/><link rel="apple-touch-icon-precomposed" href="https://cdn.ipinfo.io/static/deviceicons/apple-icon-precomposed.png"/><link rel="icon" href="/favicon.ico" sizes="any"/><link rel="stylesheet" media="all" data-href="https://use.typekit.net/qls3unz.css"/><link rel="stylesheet" data-href="https://fonts.googleapis.com/icon?family=Material+Icons%7CMaterial+Icons+Outlined"/><link rel="preload" href="https://website-cdn.ipinfo.io/_next/static/css/92cc48ab165cd8b6.css" as="style"/><link rel="stylesheet" href="https://website-cdn.ipinfo.io/_next/static/css/92cc48ab165cd8b6.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="https://website-cdn.ipinfo.io/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/webpack-6513bf5296b2830b.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/framework-aa372710a8ef8c81.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/main-752282ff6ea37f49.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/pages/_app-aef07bb291c8fd73.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/3922-0774fa125ca2c127.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/chunks/pages/customers/%5Bid%5D-da74d07ef8096bbd.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/sha-1eca43b/_buildManifest.js" defer=""></script><script src="https://website-cdn.ipinfo.io/_next/static/sha-1eca43b/_ssgManifest.js" defer=""></script><link rel="stylesheet" href="https://use.typekit.net/qls3unz.css"/><link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons%7CMaterial+Icons+Outlined"/></head><body class="font-sans"><div id="__next"><div class="text-charcoal-blue-primary"><div class="bg-white"><header class="relative py-px top-0 z-navigation bg-white lg:bg-white-08 sm:backdrop-filter sm:backdrop-blur border-b border-gray-100 sticky"><nav class="container py-3 md:py-4 flex items-center justify-between"><a class="py-1 mr-5" href="/"><img alt="IPinfo - Comprehensive IP address data, IP geolocation API and database" loading="lazy" width="92" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/logo-positive.0a4ba892.svg"/></a><div class="hidden md:flex items-center justify-end"><div class="relative md:static" data-headlessui-state=""><button class="bg-transparent group rounded inline-flex items-center md:pl-2 md:pr-1 py-2 focus:outline-none bg-charcoal-primary body-p-semibold leading-16 text-charcoal-blue-primary" type="button" aria-expanded="false" data-headlessui-state=""><span class="pr-1">Products</span><span></span></button></div><span hidden="" style="position:fixed;top:1px;left:1px;width:1px;height:0;padding:0;margin:-1px;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border-width:0;display:none"></span><div class="relative md:static" data-headlessui-state=""><button class="bg-transparent group rounded inline-flex items-center md:pl-2 md:pr-1 py-2 focus:outline-none bg-charcoal-primary body-p-semibold leading-16 text-charcoal-blue-primary" type="button" aria-expanded="false" data-headlessui-state=""><span class="pr-1">Solutions</span><span></span></button></div><span hidden="" style="position:fixed;top:1px;left:1px;width:1px;height:0;padding:0;margin:-1px;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border-width:0;display:none"></span><div class="relative md:static" data-headlessui-state=""><button class="bg-transparent group rounded inline-flex items-center md:pl-2 md:pr-1 py-2 focus:outline-none bg-charcoal-primary body-p-semibold leading-16 text-charcoal-blue-primary" type="button" aria-expanded="false" data-headlessui-state=""><span class="pr-1">Why IPinfo?</span><span></span></button></div><span hidden="" style="position:fixed;top:1px;left:1px;width:1px;height:0;padding:0;margin:-1px;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border-width:0;display:none"></span><a class="body-p-semibold leading-16 px-3 py-2" href="/pricing">Pricing</a><div class="relative md:static" data-headlessui-state=""><button class="bg-transparent group rounded inline-flex items-center md:pl-2 md:pr-1 py-2 focus:outline-none bg-charcoal-primary body-p-semibold leading-16 text-charcoal-blue-primary" type="button" aria-expanded="false" data-headlessui-state=""><span class="pr-1">Resources</span><span></span></button></div><span hidden="" style="position:fixed;top:1px;left:1px;width:1px;height:0;padding:0;margin:-1px;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border-width:0;display:none"></span><a class="body-p-semibold leading-16 px-3 py-2" href="/developers">Docs</a><div><div class="visible xl:hidden"><div class="relative" data-headlessui-state=""><button class="inline-flex items-center justify-center rounded h-10 w-14 border border-transparent focus:border-black" type="button" aria-expanded="false" data-headlessui-state=""><img alt="Open menu" loading="lazy" width="25" height="16" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/icon-menu.1b6dca09.svg"/></button></div><span hidden="" style="position:fixed;top:1px;left:1px;width:1px;height:0;padding:0;margin:-1px;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border-width:0;display:none"></span></div><div class="pl-4 space-x-3 hidden xl:block text-right"><div class="flex flex-col items-center gap-3 xl:flex-row justify-end"><a class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative p-0 bg-transparent text-charcoal-blue-primary w-full xl:w-auto xl:mx-5 transition ease-in-out delay-150 opacity-100 false" target="_self" href="/login"><span class="flex justify-center items-center gap-1 false">Login</span></a><a class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative px-5 py-[7px] bg-blue-primary text-white hover:bg-blue-06 w-full xl:w-32 false" target="_self" data-marketing-event="{"event":"cta","cta_name":"sign_up","cta_page_loc":"header"}" href="/signup"><span class="flex justify-center items-center gap-1 false">Sign up</span></a></div></div></div></div><div class="md:hidden"><button class="inline-flex items-center justify-center rounded h-10 w-14 border border-transparent focus:border-black"><img alt="Open menu" loading="lazy" width="25" height="16" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/icon-menu.1b6dca09.svg"/></button></div></nav></header><div class="flex flex-col sm:flex-row gap-x-6 gap-y-2 py-4 bg-v2-blue-01 justify-center items-center" id="ip-lookup-bar" data-convert-element-id="ip-lookup-bar"><a class="flex flex-row gap-x-2 items-center hover:text-v2-blue" href="/what-is-my-ip"><img alt="IPinfo - Comprehensive IP address data, IP geolocation API and database" loading="lazy" width="62" height="79" decoding="async" data-nimg="1" class="size-6" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/pin-positive.a4f95939.svg"/> My IP ↗</a><span class="font-bold">or</span><form class="space-y-4 sm:space-y-0 sm:space-x-4 sm:flex items-stretch w-96"><label class="block text-base text-charcoal-blue-primary font-bold w-full"><div></div><div class="relative w-full"><input name="search" type="text" placeholder="e.g: 8.8.8.8 or AS13335" required="" class="border rounded px-2.5 py-2 font-semibold light-placeholder w-full focus:outline-none focus:ring focus:ring-bali-hai-02 disabled:bg-charcoal-blue-10 disabled:border-charcoal-blue-30 disabled:text-charcoal-blue-30 border-bali-hai-primary text-charcoal-blue-primary pl-9"/><span></span></div></label><button class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative px-5 py-[9px] bg-blue-primary text-white hover:bg-blue-06 w-full sm:w-auto false" type="submit" href="" target="_self"><span class="flex justify-center items-center gap-1 false">Search</span></button></form></div><div data-page-type="" class="py-12 container "><div><section class="pb-10 md:pb-10"><img alt="Oort" loading="lazy" width="110" height="36" decoding="async" data-nimg="1" class="mb-6 h-12 w-auto" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/oort.08ee5df3.svg"/><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block mb-4">🔓 Cybersecurity</span><h1 class="heading-h1">How Oort optimizes identity threat detection and response with IPinfo</h1><h2 class="text-3xl mt-4 text-blue-primary font-bold">Lowering costs and improving efficiency by 5x</h2><h2 class="subheading-sm mt-4">Oort uses IP address data in Snowflake to improve team efficiency for Identity Threat Detection. Using IPinfo’s data in Snowflake, Oort is connecting disparate data sources into one unified feed, eliminating data silos between teams, and giving their customers a unified view of identities.</h2></section><section class="py-8"><div class="bg-charcoal-blue-03 rounded p-6 md:p-12 space-y-4"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">📈 Market position</span><h3 class="heading-h3">About <!-- -->Oort</h3><h4 class="subheading-sm max-w-5xl">Since 2022, Oort has developed a leading identity threat detection & response solution that has secured over 500,000 accounts. They are dedicated to solving the problem of enterprise security by focusing on the crucial aspect of identity management. While many organizations are overwhelmed with complex and ever-changing data related to identities, technologies, relationships, and users, Oort provides a unified source of threat intelligence to prevent, detect, and respond to threats efficiently and in real-time.</h4><ul class="block w-full space-x-7 flex items-center justify-start pt-4"><li><a href="https://twitter.com/oort_io" target="_blank" rel="noreferrer"><img alt="twitter" loading="lazy" width="24" height="24" decoding="async" data-nimg="1" class="" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/x-light.5e18e52f.svg"/></a></li><li><a href="https://www.linkedin.com/company/oort-inc/" target="_blank" rel="noreferrer"><img alt="linkedin" loading="lazy" width="24" height="24" decoding="async" data-nimg="1" class="" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/linkedin.631676d5.svg"/></a></li><li><a href="https://oort.io/" target="_blank" rel="noreferrer"><img alt="website" loading="lazy" width="24" height="24" decoding="async" data-nimg="1" class="" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/link.69d6bda7.svg"/></a></li></ul></div></section><section class="pt-6 pb-6 md:pb-16 space-y-6"><div class="space-y-3 lg:space-y-0 lg:flex lg:items-center lg:justify-between"><iframe class="w-full lg:max-w-xl mx-auto rounded" height="300px" title="YouTube video player" frameBorder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe><ul class="flex-1 grid grid-cols-2 lg:pl-6 gap-3 lg:gap-6"><li><div class="h-full flex flex-col items-center justify-start lg:items-start space-y-2 border rounded py-6 px-4 lg:p-8"><span></span><span class="body-p">Client</span><h6 class="heading-h6 text-center lg:text-left">Michael Mariott</h6></div></li><li><div class="h-full flex flex-col items-center justify-start lg:items-start space-y-2 border rounded py-6 px-4 lg:p-8"><span></span><span class="body-p">Customer Since</span><h6 class="heading-h6 text-center lg:text-left">2022</h6></div></li><li><div class="h-full flex flex-col items-center justify-start lg:items-start space-y-2 border rounded py-6 px-4 lg:p-8"><span></span><span class="body-p">Company</span><h6 class="heading-h6 text-center lg:text-left">Oort</h6></div></li><li><div class="h-full flex flex-col items-center justify-start lg:items-start space-y-2 border rounded py-6 px-4 lg:p-8"><span></span><span class="body-p">APIs used</span><h6 class="heading-h6 text-center lg:text-left">IP Geolocation, Privacy Detection, and ASN</h6></div></li></ul></div></section><div class="grid grid-cols-1 lg:grid-cols-12 gap-x-8 py-12"><div class="hidden lg:block relative hidden lg:col-span-3"><div class="sticky top-24"><div class="bg-white border border-charcoal-blue-10 rounded w-full"><a href="#problem"><div class=" cursor-pointer rounded flex justify-between items-center py-3 px-6 transition-colors duration-150"><div class="flex items-center"><h3 class="w-9 text-center heading-h3 text-charcoal-blue-30 transition-colors duration-150">01</h3><h5 class="pl-2 heading-h5 text-charcoal-blue-70 transition-colors duration-150">The problem</h5></div><span></span></div></a><a href="#process"><div class=" cursor-pointer rounded flex justify-between items-center py-3 px-6 transition-colors duration-150"><div class="flex items-center"><h3 class="w-9 text-center heading-h3 text-charcoal-blue-30 transition-colors duration-150">02</h3><h5 class="pl-2 heading-h5 text-charcoal-blue-70 transition-colors duration-150">The process</h5></div><span></span></div></a><a href="#solution"><div class=" cursor-pointer rounded flex justify-between items-center py-3 px-6 transition-colors duration-150"><div class="flex items-center"><h3 class="w-9 text-center heading-h3 text-charcoal-blue-30 transition-colors duration-150">03</h3><h5 class="pl-2 heading-h5 text-charcoal-blue-70 transition-colors duration-150">The solution</h5></div><span></span></div></a><a href="#result"><div class=" cursor-pointer rounded flex justify-between items-center py-3 px-6 transition-colors duration-150"><div class="flex items-center"><h3 class="w-9 text-center heading-h3 text-charcoal-blue-30 transition-colors duration-150">04</h3><h5 class="pl-2 heading-h5 text-charcoal-blue-70 transition-colors duration-150">The result</h5></div><span></span></div></a></div></div></div><section class="lg:col-span-9 space-y-14"><div class="pb-16 border-b last:border-transparent"><a class="block relative invisible -top-32" id="problem"></a><div><div class="space-y-4"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">🤔 The problem</span><h3 class="heading-h2">Gathering actionable intelligence more quickly</h3><p class="subheading-sm pr-4 whitespace-pre-wrap">Oort needed to gather more context to separate suspicious logins from authorized account users. Their team of data scientists required insights that could be used immediately to develop and test highly tuned detections for Oort’s customers. In particular, geolocation context is an important parameter for Oort’s customers, allowing them to detect suspicious activity to improve risk monitoring and inform decisions. Their customers also wanted more information about VPN usage to enforce organizational policies regarding commercial VPNs.</p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-green.ae91d138.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->Our customers are trying to understand when accounts are performing suspicious activities. They need to determine if the user identity is who they’re claiming to be. IP address data is a really good indication of that.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Nicolas Dard" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/NicolasDard.a60f0e39.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Nicolas Dard</h6><span class="body-p-sm">VP of Product</span></div></div></div></div></div></div><div class="pb-16 border-b last:border-transparent"><a class="block relative invisible -top-32" id="process"></a><div><div class="space-y-4"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">⏳ The process</span><h3 class="heading-h2">Finding the right IP address partner</h3><p class="subheading-sm pr-4 whitespace-pre-wrap">Oort began looking for an IP Geolocation, ASN, and Privacy Detection data source with a high data quality standard and seamless access options. They needed context that was immediately available to use. Their ideal IP data solution would be easily implemented into their identity management products to reduce the amount of time data scientists and engineering teams spent testing and preparing the data for use. The solution also needed to merge disparate data sources into one unified feed while also providing near-real-time updates enabling the best enrichment for their products.</p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-red.08e57a6d.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->Geolocation is a really important point for our customers. When an account logs on and is involved in suspicious activities that look like security risks, it’s very important to be able to identify where that person normally logs on versus the location of the suspicious activity. It’s a vital piece of context to make decisions on how to respond to that particular area of risk.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Nicolas Dard" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/NicolasDard.a60f0e39.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Nicolas Dard</h6><span class="body-p-sm">VP of Product</span></div></div></div></div></div></div><div class="pb-16 border-b last:border-transparent"><a class="block relative invisible -top-32" id="solution"></a><div><div class="space-y-4"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">🔬 The solution</span><h3 class="heading-h2">Using IP address data in Snowflake</h3><p class="subheading-sm pr-4 whitespace-pre-wrap">This is when Oort discovered the cost-savings associated with using IPinfo’s data in Snowflake. They could easily connect their existing data sources with IP intelligence to give their team full visibility of the insights immediately. The fact that these IP data queries could be run easily and at a low cost in Snowflake added significant value. Using IPinfo’s data in Snowflake also meant there was no barrier between Oort’s data science team using the IP data. This is because Snowflake’s platform eliminated dependency on Oort’s engineering team to integrate IP address intelligence into their solution. This freed up Oort’s engineering team to work on other pieces of functionality while their data science team began aggregating the data, building new detections, and gathering the context they needed to understand what risks are associated with a given identity based on IP address data. Oort is now using IPinfo’s IP to Geolocation data to monitor suspicious logins and other security risks. With this data, they can identify the location of those logins to detect anomalies to provide more context before responding to incidents. Oort has also implemented the Privacy Detection dataset to help their users pinpoint VPN users. Now Oort’s customers can receive notifications of commercial VPN usage which provides enough context to enforce compliance with organizational policies.</p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-yellow.57ae43b1.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->With IPinfo, our chief data scientist could immediately access the information in a table and then start to implement it. From an evaluation perspective on our end, this is completely different and a bit of a game changer.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Didi Dotan" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/DidiDotan.ee36e28c.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Didi Dotan</h6><span class="body-p-sm">CTO at Oort</span></div></div></div></div><div class="mt-10"><p class="subheading-sm pr-4 whitespace-pre-wrap"></p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-yellow.57ae43b1.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->Using IPinfo’s data in Snowflake allows us to immediately start using the data in our detections. That means that our data science team is working so much more efficiently.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Didi Dotan" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/DidiDotan.ee36e28c.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Didi Dotan</h6><span class="body-p-sm">CTO at Oort</span></div></div></div></div></div></div><div class="pb-16 border-b last:border-transparent"><a class="block relative invisible -top-32" id="result"></a><div><div class="space-y-4"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">🎉 The result</span><h3 class="heading-h2"></h3><p class="subheading-sm pr-4 whitespace-pre-wrap">Since implementing IPinfo’s data in Snowflake, Oort estimates a five times improvement in efficiency for their data science and engineering teams. The IP geolocation and Privacy Detection data have given Oort’s customers more visibility over accounts to determine when logins are suspicious and need to be investigated. Oort has also discovered they need more context surrounding masked IP addresses and are exploring additional use cases with IPinfo’s team. Oort’s users love the context provided with IP addresses and are excited about the further implementation of this data.</p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-gray.fa6d1f56.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->Using IPinfo data within Snowflake has improved the efficiency of Oort’s data science team by five times for IP-based detections.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Didi Dotan" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/DidiDotan.ee36e28c.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Didi Dotan</h6><span class="body-p-sm">CTO at Oort</span></div></div></div></div><div class="mt-10"><p class="subheading-sm pr-4 whitespace-pre-wrap"></p><div class="pt-5 space-y-5 "><img alt="" loading="lazy" width="51" height="39" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/quote-gray.fa6d1f56.svg"/><p class="body-p pr-12 sm:pr-0">"<!-- -->People love the identity context we’ve added with IP address data. They’re using it and want us to expand this context even further, which is a really great opportunity for Oort.<!-- -->"</p><div class="flex items-center space-x-4"><img alt="Nicolas Dard" loading="lazy" width="400" height="400" decoding="async" data-nimg="1" class="h-12 w-12 rounded-full" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/NicolasDard.a60f0e39.jpeg"/><div class="flex flex-col"><h6 class="heading-h6">Nicolas Dard</h6><span class="body-p-sm">VP of Product</span></div></div></div></div></div></div></section></div><section class="py-8 space-y-6"><h3 class="heading-h3">Related Customer Stories</h3><ul class="grid grid-cols-1 lg:grid-cols-2 gap-5"><li><div class="h-full min-h-40 md:grid grid-cols-12 bg-white border border-gray-200 rounded overflow-hidden px-2 md:px-0"><div class="col-span-4 py-4 md:py-0 md:my-4 border-b md:border-b-0 md:border-r flex items-center justify-center relative"><img alt="GreyNoise" loading="lazy" width="160" height="48" decoding="async" data-nimg="1" class="px-2 max-h-[50%]" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/greynoise.c4697e3d.svg"/></div><div class="col-span-8 px-4 py-4 md:p-6 flex flex-col justify-between"><span class="block heading-uc text-gray-500 uppercase tracking-widest inline-block ">🔓 Cybersecurity</span><p class="body-p pt-2 pb-4">Since using IPinfo, GreyNoise has become recognized as the go-to Anti-Threat Intelligence source.</p><div><a class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative p-0 bg-transparent text-blue-primary hover:text-blue-06 false" target="_self" href="/customers/greynoise"><span class="flex justify-center items-center gap-1 false">Read Story<span></span></span></a></div></div></div></li></ul></section></div><section class="px-3 pt-16"><div class="bg-gray-800 rounded py-6 px-7 flex flex-col space-y-5 md:space-y-0 md:flex-row items-center justify-center md:justify-between "><div class="space-y-3"><h4 class="text-white heading-h3">Get started with IPinfo</h4></div><div class="flex flex-col space-y-5 sm:flex-row sm:items-center sm:space-x-5 sm:space-y-0 text-white"><a class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative px-5 py-[9px] bg-blue-primary text-white hover:bg-blue-06 false" target="_self" href="/signup"><span class="flex justify-center items-center gap-1 false">Sign up for free</span></a><a class="transition rounded-3px outline-none inline-flex items-center justify-center gap-1 body-p-semibold relative px-5 py-[9px] bg-bali-hai-01 text-charcoal-blue-primary hover:bg-bali-hai-03 false" target="_self" href="/contact"><span class="flex justify-center items-center gap-1 false">Get a quote</span></a></div></div></section></div><footer class="bg-white border-t border-gray-200 pt-12 lg:pt-16"><div class="container lg:hidden"><div class="pb-12 lg:pb-16"><div class="w-full flex flex-col gap-4 lg:flex-row lg:gap-0 justify-between"><ul class="flex flex-col gap-4 max-w-2xl"><li class="flex flex-col"><div class="flex cursor-pointer select-none"><span></span><strong class="text-charcoal-blue-primary heading-h5 select-none">Database Downloads</strong></div><div class="overflow-hidden transition-all duration-300 mt-4 ml-6 opacity-0" style="max-height:0"><ul class="space-y-3"><li><a class="" target="_self" href="/products/ip-geolocation-database"><span class="text-charcoal-blue-80">IP Geolocation Database</span></a></li><li><a class="" target="_self" href="/products/ip-abuse-contact-database"><span class="text-charcoal-blue-80">Abuse Contact Database</span></a></li><li><a class="" target="_self" href="/products/ip-company-database"><span class="text-charcoal-blue-80">IP to Company Database</span></a></li><li><a class="" target="_self" href="/products/anonymous-ip-database"><span class="text-charcoal-blue-80">IP to Privacy Detection Database</span></a></li><li><a class="" target="_self" href="/products/mobile-ip-database"><span class="text-charcoal-blue-80">IP to Mobile Carrier Database</span></a></li><li><a class="" target="_self" href="/products/hosted-domains-database"><span class="text-charcoal-blue-80">IP to Hosted Domains Database</span></a></li><li><a class="" target="_self" href="/products/asn-database"><span class="text-charcoal-blue-80">IP to ASN Database</span></a></li><li><a class="" target="_self" href="/products/whois-database"><span class="text-charcoal-blue-80">IP Whois Database</span></a></li><li><a class="" target="_self" href="/products/residential-proxy"><span class="text-charcoal-blue-80">Residential Proxy Database</span></a></li><li><a class="" target="_self" href="/lite"><span class="text-charcoal-blue-80">Free IP to Country + ASN</span></a></li></ul></div></li><li class="flex flex-col"><div class="flex cursor-pointer select-none"><span></span><strong class="text-charcoal-blue-primary heading-h5 select-none">API Products</strong></div><div class="overflow-hidden transition-all duration-300 mt-4 ml-6 opacity-0" style="max-height:0"><ul class="space-y-3"><li><a class="" target="_self" href="/products/ip-geolocation-api"><span class="text-charcoal-blue-80">IP Geolocation API</span></a></li><li><a class="" target="_self" href="/products/ranges-api"><span class="text-charcoal-blue-80">IP Ranges API</span></a></li><li><a class="" target="_self" href="/products/proxy-vpn-detection-api"><span class="text-charcoal-blue-80">Privacy Detection API</span></a></li><li><a class="" target="_self" href="/products/ip-company-api"><span class="text-charcoal-blue-80">IP to Company</span></a></li><li><a class="" target="_self" href="/products/asn-api"><span class="text-charcoal-blue-80">ASN API</span></a></li><li><a class="" target="_self" href="/products/reverse-ip-api"><span class="text-charcoal-blue-80">Hosted Domains API</span></a></li><li><a class="" target="_self" href="/products/ip-carrier-api"><span class="text-charcoal-blue-80">IP to Mobile Carrier</span></a></li><li><a class="" target="_self" href="/products/ip-abuse-contact-api"><span class="text-charcoal-blue-80">Abuse Contact API</span></a></li><li><a class="" target="_self" href="/products/whois-api"><span class="text-charcoal-blue-80">IP Whois API</span></a></li></ul></div></li><li class="flex flex-col"><div class="flex cursor-pointer select-none"><span></span><strong class="text-charcoal-blue-primary heading-h5 select-none">Data</strong></div><div class="overflow-hidden transition-all duration-300 mt-4 ml-6 opacity-0" style="max-height:0"><ul class="space-y-3"><li><a class="" target="_self" href="/ip-data"><span class="text-charcoal-blue-80">Our Data</span></a></li><li><a class="" target="_self" href="/what-is-my-ip"><span class="text-charcoal-blue-80">My IP Address</span></a></li><li><a class="" target="_self" href="/tools"><span class="text-charcoal-blue-80">Tools</span></a></li><li><a class="" target="_self" href="/countries"><span class="text-charcoal-blue-80">Country Internet Data</span></a></li><li><a class="" target="_self" href="/accuracy"><span class="text-charcoal-blue-80">Global Geolocation Accuracy</span></a></li><li><a class="" target="_self" href="/tags"><span class="text-charcoal-blue-80">IP Address Tags</span></a></li><li><a class="" target="_self" href="/hosting"><span class="text-charcoal-blue-80">Hosted Domains by ASNs</span></a></li><li><a class="" target="_self" href="/ips"><span class="text-charcoal-blue-80">IP Ranges</span></a></li><li><a class="" target="_self" href="/lite"><span class="text-charcoal-blue-80">Open Access</span></a></li></ul></div></li><li class="flex flex-col"><div class="flex cursor-pointer select-none"><span></span><strong class="text-charcoal-blue-primary heading-h5 select-none">Resources</strong></div><div class="overflow-hidden transition-all duration-300 mt-4 ml-6 opacity-0" style="max-height:0"><ul class="space-y-3"><li><a class="" target="_self" href="/developers"><span class="text-charcoal-blue-80">Documentation</span></a></li><li><a class="" target="_self" href="/developers/libraries"><span class="text-charcoal-blue-80">Libraries</span></a></li><li><a class="" target="_self" href="/faq"><span class="text-charcoal-blue-80">Help Centre</span></a></li><li><a class="" target="_self" href="/blog"><span class="text-charcoal-blue-80">Blog</span></a></li><li><a class="" target="_self" href="/e-books"><span class="text-charcoal-blue-80">E-books</span></a></li><li><a class="" target="_self" href="/use-cases"><span class="text-charcoal-blue-80">Use Cases</span></a></li><li><a class="" target="_self" href="/integrations"><span class="text-charcoal-blue-80">Integrations</span></a></li><li><a class="" target="_self" href="/blog/ip-address-information"><span class="text-charcoal-blue-80">What is an IP Address?</span></a></li></ul></div></li><li class="flex flex-col"><div class="flex cursor-pointer select-none"><span></span><strong class="text-charcoal-blue-primary heading-h5 select-none">Company</strong></div><div class="overflow-hidden transition-all duration-300 mt-4 ml-6 opacity-0" style="max-height:0"><ul class="space-y-3"><li><a class="" target="_self" href="/about"><span class="text-charcoal-blue-80">About</span></a></li><li><a class="" target="_self" href="/jobs"><span class="text-charcoal-blue-80">Careers</span></a></li><li><a class="" target="_self" href="/community"><span class="text-charcoal-blue-80">Community</span></a></li><li><a class="" target="_self" href="/customers"><span class="text-charcoal-blue-80">Customers</span></a></li><li><a class="" target="_self" href="/support"><span class="text-charcoal-blue-80">Contact Support</span></a></li></ul></div></li></ul></div></div></div><div class="container"><div class="pb-12 lg:pb-16 hidden lg:block"><ul class="flex flex-col gap-6 md:grid md:grid-cols-4 md:gap-5 lg:flex lg:flex-row lg:gap-0 justify-between"><li><span class="block heading-h5 mb-5">Database Downloads</span><ul class="space-y-3"><li><a class="" target="_self" href="/products/ip-geolocation-database"><span class="text-charcoal-blue-80">IP Geolocation Database</span></a></li><li><a class="" target="_self" href="/products/ip-abuse-contact-database"><span class="text-charcoal-blue-80">Abuse Contact Database</span></a></li><li><a class="" target="_self" href="/products/ip-company-database"><span class="text-charcoal-blue-80">IP to Company Database</span></a></li><li><a class="" target="_self" href="/products/anonymous-ip-database"><span class="text-charcoal-blue-80">IP to Privacy Detection Database</span></a></li><li><a class="" target="_self" href="/products/mobile-ip-database"><span class="text-charcoal-blue-80">IP to Mobile Carrier Database</span></a></li><li><a class="" target="_self" href="/products/hosted-domains-database"><span class="text-charcoal-blue-80">IP to Hosted Domains Database</span></a></li><li><a class="" target="_self" href="/products/asn-database"><span class="text-charcoal-blue-80">IP to ASN Database</span></a></li><li><a class="" target="_self" href="/products/whois-database"><span class="text-charcoal-blue-80">IP Whois Database</span></a></li><li><a class="" target="_self" href="/products/residential-proxy"><span class="text-charcoal-blue-80">Residential Proxy Database</span></a></li><li><a class="" target="_self" href="/lite"><span class="text-charcoal-blue-80">Free IP to Country + ASN</span></a></li></ul></li><li><span class="block heading-h5 mb-5">API Products</span><ul class="space-y-3"><li><a class="" target="_self" href="/products/ip-geolocation-api"><span class="text-charcoal-blue-80">IP Geolocation API</span></a></li><li><a class="" target="_self" href="/products/ranges-api"><span class="text-charcoal-blue-80">IP Ranges API</span></a></li><li><a class="" target="_self" href="/products/proxy-vpn-detection-api"><span class="text-charcoal-blue-80">Privacy Detection API</span></a></li><li><a class="" target="_self" href="/products/ip-company-api"><span class="text-charcoal-blue-80">IP to Company</span></a></li><li><a class="" target="_self" href="/products/asn-api"><span class="text-charcoal-blue-80">ASN API</span></a></li><li><a class="" target="_self" href="/products/reverse-ip-api"><span class="text-charcoal-blue-80">Hosted Domains API</span></a></li><li><a class="" target="_self" href="/products/ip-carrier-api"><span class="text-charcoal-blue-80">IP to Mobile Carrier</span></a></li><li><a class="" target="_self" href="/products/ip-abuse-contact-api"><span class="text-charcoal-blue-80">Abuse Contact API</span></a></li><li><a class="" target="_self" href="/products/whois-api"><span class="text-charcoal-blue-80">IP Whois API</span></a></li></ul></li><li><span class="block heading-h5 mb-5">Data</span><ul class="space-y-3"><li><a class="" target="_self" href="/ip-data"><span class="text-charcoal-blue-80">Our Data</span></a></li><li><a class="" target="_self" href="/what-is-my-ip"><span class="text-charcoal-blue-80">My IP Address</span></a></li><li><a class="" target="_self" href="/tools"><span class="text-charcoal-blue-80">Tools</span></a></li><li><a class="" target="_self" href="/countries"><span class="text-charcoal-blue-80">Country Internet Data</span></a></li><li><a class="" target="_self" href="/accuracy"><span class="text-charcoal-blue-80">Global Geolocation Accuracy</span></a></li><li><a class="" target="_self" href="/tags"><span class="text-charcoal-blue-80">IP Address Tags</span></a></li><li><a class="" target="_self" href="/hosting"><span class="text-charcoal-blue-80">Hosted Domains by ASNs</span></a></li><li><a class="" target="_self" href="/ips"><span class="text-charcoal-blue-80">IP Ranges</span></a></li><li><a class="" target="_self" href="/lite"><span class="text-charcoal-blue-80">Open Access</span></a></li></ul></li><li><span class="block heading-h5 mb-5">Resources</span><ul class="space-y-3"><li><a class="" target="_self" href="/developers"><span class="text-charcoal-blue-80">Documentation</span></a></li><li><a class="" target="_self" href="/developers/libraries"><span class="text-charcoal-blue-80">Libraries</span></a></li><li><a class="" target="_self" href="/faq"><span class="text-charcoal-blue-80">Help Centre</span></a></li><li><a class="" target="_self" href="/blog"><span class="text-charcoal-blue-80">Blog</span></a></li><li><a class="" target="_self" href="/e-books"><span class="text-charcoal-blue-80">E-books</span></a></li><li><a class="" target="_self" href="/use-cases"><span class="text-charcoal-blue-80">Use Cases</span></a></li><li><a class="" target="_self" href="/integrations"><span class="text-charcoal-blue-80">Integrations</span></a></li><li><a class="" target="_self" href="/blog/ip-address-information"><span class="text-charcoal-blue-80">What is an IP Address?</span></a></li></ul></li><li><span class="block heading-h5 mb-5">Company</span><ul class="space-y-3"><li><a class="" target="_self" href="/about"><span class="text-charcoal-blue-80">About</span></a></li><li><a class="" target="_self" href="/jobs"><span class="text-charcoal-blue-80">Careers</span></a></li><li><a class="" target="_self" href="/community"><span class="text-charcoal-blue-80">Community</span></a></li><li><a class="" target="_self" href="/customers"><span class="text-charcoal-blue-80">Customers</span></a></li><li><a class="" target="_self" href="/support"><span class="text-charcoal-blue-80">Contact Support</span></a></li></ul></li></ul></div><div class="flex flex-col lg:flex-row justify-between gap-y-4 lg:gap-y-0 pb-6"><div class="flex flex-col lg:flex-row justify-between gap-x-4 gap-y-4"><img alt="IPinfo - Comprehensive IP address data, IP geolocation API and database" loading="lazy" width="126" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/logo-positive.0a4ba892.svg"/><ul class="flex gap-5 items-center"><li><a href="https://community.ipinfo.io" target="_blank" rel="noopener noreferrer"><img alt="Community" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/discourse-light.91b917f1.svg"/></a></li><li><a href="https://www.linkedin.com/company/ipinfo/" target="_blank" rel="noopener noreferrer"><img alt="LinkedIn" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/linkedin-light.c8869563.svg"/></a></li><li><a href="https://github.com/ipinfo" target="_blank" rel="noopener noreferrer"><img alt="GitHub" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/github-light.9781e033.svg"/></a></li><li><a href="https://x.com/ipinfo" target="_blank" rel="noopener noreferrer"><img alt="X" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/x-light.5e18e52f.svg"/></a></li><li><a href="https://www.youtube.com/@ipinfo-io" target="_blank" rel="noopener noreferrer"><img alt="YouTube" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/youtube-light.cf5a6d38.svg"/></a></li><li><a href="https://www.facebook.com/ipinfo.io" target="_blank" rel="noopener noreferrer"><img alt="Facebook" loading="lazy" width="30" height="30" decoding="async" data-nimg="1" style="color:transparent" src="https://website-cdn.ipinfo.io/_next/static/media/facebook-light.0be4f2a5.svg"/></a></li></ul></div><ul class="flex flex-row gap-x-4"><li><a href="https://www.capterra.com/reviews/227725/IPinfo?utm_source=vendor&utm_medium=badge&utm_campaign=capterra_reviews_badge" target="_blank" rel="noopener noreferrer"><img alt="Capterra Reviews" border="0" loading="lazy" width="150" height="49" decoding="async" data-nimg="1" style="color:transparent" src="https://assets.capterra.com/badge/7cd654c7533ce5d2d550ac86472a835b.svg"/></a></li><li><a href="https://www.g2.com/products/ipinfo-io/reviews?utm_source=review-widget" target="_blank" rel="noopener noreferrer"><img alt="Read IPinfo.io Reviews on G2" border="0" loading="lazy" width="108" height="54" decoding="async" data-nimg="1" style="color:transparent" src="https://www.g2.com/products/ipinfo-io/widgets/stars?color=white&type=read"/></a></li><li><a href="https://www.getapp.com/business-intelligence-analytics-software/a/ipinfo/reviews/" target="_blank" rel="noopener noreferrer"><img alt="GetApp Reviews" border="0" loading="lazy" width="81" height="54" decoding="async" data-nimg="1" style="color:transparent" src="https://www.getapp.com/ext/reviews_widget/v1/dark/ipinfo-application"/></a></li></ul></div><div class="pb-20 text-charcoal-blue-primary lg:pb-12"><ul class="flex items-center justify-start body-p-sm opacity-40 gap-x-2"><li>Copyright © <!-- -->2025<!-- --> IPinfo®</li><li><a href="/terms-of-service" class="hover:underline">Terms & Conditions</a></li><li><a href="/privacy-policy" class="hover:underline">Privacy Policy</a></li><li><a href="/acceptable-use-policy" class="hover:underline">Acceptable Use Policy</a></li></ul></div></div></footer></div></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"story":{"name":"Oort","seo":{"title":"Oort Use Case \u0026 Review","description":"Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo.","structuredData":{"@context":"https://www.schema.org","@type":"Article","headline":"How Oort optimizes identity threat detection and response with IPinfo","url":"https://ipinfo.io/customers/oort","image":"https://ipinfo.io/static/images/layout/logo.svg","description":"Oort uses IP data in Snowflake to improve team efficiency for Threat Detection. Oort is connecting disparate data sources into one unified feed with IPinfo.","articleBody":"Oort needed to gather more context to separate suspicious logins from authorized account users. Their team of data scientists required insights that could be used immediately to develop and test highly tuned detections for Oort’s customers.\n\nIn particular, geolocation context is an important parameter for Oort’s customers, allowing them to detect suspicious activity to improve risk monitoring and inform decisions. Their customers also wanted more information about VPN usage to enforce organizational policies regarding commercial VPNs.","mainEntityOfPage":"https://ipinfo.io/customers/oort","datePublished":"16 June 2023","dateModified":"16 June 2023","author":{"@type":"Person","name":"Didi Dotan"},"publisher":{"@type":"Organization","name":"IPinfo","legalName":"IPinfo Inc.","logo":{"@type":"ImageObject","url":"https://ipinfo.io/static/images/layout/logo.svg","width":"150"}}}},"category":"🔓 Cybersecurity","title":"How Oort optimizes identity threat detection and response with IPinfo","secondtitle":"Lowering costs and improving efficiency by 5x","subtitle":"Oort uses IP address data in Snowflake to improve team efficiency for Identity Threat Detection. Using IPinfo’s data in Snowflake, Oort is connecting disparate data sources into one unified feed, eliminating data silos between teams, and giving their customers a unified view of identities.","marketPosition":{"content":"Since 2022, Oort has developed a leading identity threat detection \u0026 response solution that has secured over 500,000 accounts. They are dedicated to solving the problem of enterprise security by focusing on the crucial aspect of identity management. While many organizations are overwhelmed with complex and ever-changing data related to identities, technologies, relationships, and users, Oort provides a unified source of threat intelligence to prevent, detect, and respond to threats efficiently and in real-time.","socialLinks":[{"type":"twitter","url":"https://twitter.com/oort_io"},{"type":"linkedin","url":"https://www.linkedin.com/company/oort-inc/"},{"type":"website","url":"https://oort.io/"}]},"videoAndInfos":{"videoUrl":"https://www.youtube.com/embed/cIpIinaPqSs","cards":[{"type":"Client","label":"Michael Mariott"},{"type":"Customer Since","label":"2022"},{"type":"Company","label":"Oort"},{"type":"APIs used","label":"IP Geolocation, Privacy Detection, and ASN"}]},"caseStudies":[{"type":"problem","typeLabel":"The problem","title":"Gathering actionable intelligence more quickly","content":"Oort needed to gather more context to separate suspicious logins from authorized account users. Their team of data scientists required insights that could be used immediately to develop and test highly tuned detections for Oort’s customers.\n\nIn particular, geolocation context is an important parameter for Oort’s customers, allowing them to detect suspicious activity to improve risk monitoring and inform decisions. Their customers also wanted more information about VPN usage to enforce organizational policies regarding commercial VPNs.","quote":{"content":"Our customers are trying to understand when accounts are performing suspicious activities. They need to determine if the user identity is who they’re claiming to be. IP address data is a really good indication of that.","name":"Nicolas Dard","title":"VP of Product","face":"NicolasDard"}},{"type":"process","typeLabel":"The process","title":"Finding the right IP address partner","content":"Oort began looking for an IP Geolocation, ASN, and Privacy Detection data source with a high data quality standard and seamless access options. They needed context that was immediately available to use.\n\nTheir ideal IP data solution would be easily implemented into their identity management products to reduce the amount of time data scientists and engineering teams spent testing and preparing the data for use. The solution also needed to merge disparate data sources into one unified feed while also providing near-real-time updates enabling the best enrichment for their products.","quote":{"content":"Geolocation is a really important point for our customers. When an account logs on and is involved in suspicious activities that look like security risks, it’s very important to be able to identify where that person normally logs on versus the location of the suspicious activity. It’s a vital piece of context to make decisions on how to respond to that particular area of risk.","name":"Nicolas Dard","title":"VP of Product","face":"NicolasDard"}},{"type":"solution","typeLabel":"The solution","title":"Using IP address data in Snowflake","content":"This is when Oort discovered the cost-savings associated with using IPinfo’s data in Snowflake. They could easily connect their existing data sources with IP intelligence to give their team full visibility of the insights immediately. The fact that these IP data queries could be run easily and at a low cost in Snowflake added significant value.\n\nUsing IPinfo’s data in Snowflake also meant there was no barrier between Oort’s data science team using the IP data. This is because Snowflake’s platform eliminated dependency on Oort’s engineering team to integrate IP address intelligence into their solution. \n\nThis freed up Oort’s engineering team to work on other pieces of functionality while their data science team began aggregating the data, building new detections, and gathering the context they needed to understand what risks are associated with a given identity based on IP address data.\n\nOort is now using IPinfo’s IP to Geolocation data to monitor suspicious logins and other security risks. With this data, they can identify the location of those logins to detect anomalies to provide more context before responding to incidents.\n\nOort has also implemented the Privacy Detection dataset to help their users pinpoint VPN users. Now Oort’s customers can receive notifications of commercial VPN usage which provides enough context to enforce compliance with organizational policies.","quote":{"content":"With IPinfo, our chief data scientist could immediately access the information in a table and then start to implement it. From an evaluation perspective on our end, this is completely different and a bit of a game changer.","name":"Didi Dotan","title":"CTO at Oort","face":"DidiDotan"},"additionalContent":{"quote":{"content":"Using IPinfo’s data in Snowflake allows us to immediately start using the data in our detections. That means that our data science team is working so much more efficiently.","name":"Didi Dotan","title":"CTO at Oort","face":"DidiDotan"}}},{"type":"result","typeLabel":"The result","content":"Since implementing IPinfo’s data in Snowflake, Oort estimates a five times improvement in efficiency for their data science and engineering teams. The IP geolocation and Privacy Detection data have given Oort’s customers more visibility over accounts to determine when logins are suspicious and need to be investigated. \n\nOort has also discovered they need more context surrounding masked IP addresses and are exploring additional use cases with IPinfo’s team. Oort’s users love the context provided with IP addresses and are excited about the further implementation of this data.","quote":{"content":"Using IPinfo data within Snowflake has improved the efficiency of Oort’s data science team by five times for IP-based detections.","name":"Didi Dotan","title":"CTO at Oort","face":"DidiDotan"},"additionalContent":{"quote":{"content":"People love the identity context we’ve added with IP address data. They’re using it and want us to expand this context even further, which is a really great opportunity for Oort.","name":"Nicolas Dard","title":"VP of Product","face":"NicolasDard"}}}],"relatedStories":[{"imgAlt":"GreyNoise","imgUrl":"https://cdn.ipinfo.io/static/images/customer-logos/greynoise.svg","category":{"label":"🔓 Cybersecurity"},"desc":"Since using IPinfo, GreyNoise has become recognized as the go-to Anti-Threat Intelligence source.","href":"/customers/greynoise"}]}},"__N_SSG":true},"page":"/customers/[id]","query":{"id":"oort"},"buildId":"sha-1eca43b","assetPrefix":"https://website-cdn.ipinfo.io","isFallback":false,"isExperimentalCompile":false,"gsp":true,"scriptLoader":[]}</script><div id="modal-root"></div></body></html>