Security Hazard Reporting for Login Threats
"Did this login look sketchy?" turns into instant threat intelligence. Run hazard checks automatically when security flags go up.
Trigger
Issue Updated Trigger
Triggered when an issue is updated. For example labels are changed, issue status is changed, etc.
Action
Hazard Report API
Tool to fetch a cybersecurity hazard report for a specified ip address. use when assessing an ip's threat profile (vpn, proxy, blacklists, hosting risk).
Why this helps
Manual IP lookups during security incidents create delays and dropped investigation threads. Critical threat info gets lost in messaging.
- Identify VPNs, proxies, and botnets instantly without manual lookups
- Catch threats before they escalate while memory is fresh
- Reduce investigation delay from minutes to seconds
- Keep all threat data in one Linear thread, not scattered across tabs
Setup
Build it in a few focused steps.
- 1Connect your Linear workspace and Big Data Cloud security APIs to Notis.
- 2Create an automation: 'When a security issue is marked as suspicious login, get a hazard report for any IP mentioned in the issue.'
- 3Select 'Issue Updated' as your trigger (fires when security team flags the issue).
- 4Set reports to go to your #security Slack channel for immediate triage.
- 5Dry-run by updating a test security issue with a known suspicious IP and confirm the hazard report appears.
Questions about this workflow
What data gets included in the hazard report?
VPN/proxy status, botnet affiliation, blacklist flags, hosting provider risk level, and overall threat score. All in one readable summary.
How fast is the automation?
Near instant. The hazard check usually completes within 2-5 seconds of the issue update.
Can we customize which threat types trigger this?
Yes. Tell Notis something like 'Only run hazard checks if the severity label is Critical or High', and Notis will filter appropriately.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Linear to Big data cloud. A trigger fires from one place; an action lands in another.
Linear triggers
Big data cloud actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Am I Roaming API
Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
ASN Extended Receiving From Info API
Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.
Comment Received Trigger
Triggered when a comment is received.
ASN Extended Transit To Info API
Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.
Issue Created Trigger
Triggered when a new issue is created.
ASN Rank List API
Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.
Issue Updated Trigger
Triggered when an issue is updated. For example labels are changed, issue status is changed, etc.
BGP Active Prefixes API
Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.
Private Team Comment Created
Fires when a new comment is posted on an issue in a private Linear team (polled with the connected user's token).
Reverse Geocoding With Timezone API
Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.
Private Team Issue Created
Fires when a new issue appears in a private Linear team (polled with the connected user's token).
Country by IP Address API
Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.
Private Team Issue Properties Updated
Fires when properties on an issue change in a private Linear team (polled with the connected user's token).
Country Info API
Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.
Connect any two apps with Notis in the middle.
Linear and Big data cloud, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.