Skip to content
Notis

Classify bot user agents for checklist review

Give checklist owners structured client details before they mark an access item complete.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

User Agent Parser API

Tool to parse a user-agent string into device, os, browser, and bot details. use when you have a raw user-agent header and need structured client info.

Why this helps

Checklist items remain open when raw headers are hard to interpret consistently.

  • Improves checklist consistency
  • Separates bot signals from device details
  • Speeds evidence review

Setup

Build it in a few focused steps.

  • 1Connect 21risk and Big data cloud once in the Notis portal.
  • 2Create an automation named Checklist user agent classifier.
  • 3Describe that Notis should parse each supplied user agent and summarize details relevant to the security checklist.
  • 4Pick a webhook trigger and choose where reports should go.
  • 5Test with one header from an open checklist item.

Questions about this workflow

Can it close the checklist item?

It provides parsed evidence; your checklist process decides whether to close the item.

What data should be supplied?

Provide the raw user agent header.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Big data cloud. A trigger fires from one place; an action lands in another.

21risk triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.