The people behind the free IP intelligence API and FindIP Shield
FindIP is a small independent team. We run a free, unlimited IP intelligence API that developers call from their own applications, and FindIP Shield, a free product that shows website owners the risk behind every visit, signup, login and checkout on their site. This page is who we are, how we work, and how to reach us.
What we build
Two products, one body of intelligence: which network an IP address belongs to, and what that says about the visit behind it.
The FindIP API
A free, unlimited lookup API: geolocation plus proxy, VPN, Tor, relay, hosting and datacenter, residential-proxy and malicious-IP detection, with IP reputation and risk scoring. No tiers and no hidden limits; the same API for a weekend project and a large company. How it works · API reference.
FindIP Shield
Visitor risk detection for websites, public since August 2026 and in Free Preview. One script, a WordPress plugin, a Shopify app, a Google Tag Manager tag or a no-code Cloudflare connection; then every visit and form submit on your site is scored by its network, with the reasons, and you choose what happens on the forms that matter. Shield overview.
How we work
The things we would want to know about a company before putting its script on our own site.
Free is the mission, not a funnel
Our mission is free, unlimited IP geolocation for everyone. Shield extends that to website owners. There is no paid Shield plan today, and when anything that is free changes you get 90 days' notice.
Networks, not people
Shield scores the network a visit comes from. It never collects form values, passwords, payment details or plain-text emails, and it does not fingerprint devices. Identity reaches us only as hashes and ciphertext that one dashboard path can open. Every field is documented.
Open where it matters
The browser SDK is MIT-licensed on GitHub and published to npm. CDN releases are pinned and immutable once published. The docs are served as Markdown for AI assistants, the verify endpoint has an OpenAPI description, and there is an MCP server.
Honest edges
Risk scores are signals with reasons, and they can be wrong. When intelligence is unavailable Shield says unknown, never safe. Browser-side protection is friction, not a security boundary; the server verify endpoint is. We write this on the product pages, not only in the terms.
Run like production
The API serves high-volume production traffic; Shield runs on the same infrastructure behind Cloudflare, with a separate ingest hostname and a dashboard path that is the only place site data is read. The Threat Network page lists exactly what free sites contribute and for how long it is kept.
Small team, direct line
The same team also builds ValidEmail, an email verification service. Support, data requests and security reports go to [email protected], and a person reads them.
Where to find us
Everything we publish, in one place.
Questions before you install anything?
Write to [email protected]. Security reports go to the same address with "Security report" in the subject.