What it does

Naiza evaluates product events and returns ALLOW, REVIEW or BLOCK decisions. The customer's server sends an event, such as a login, payment or registration, to the POST /api/v1/events endpoint with an x-api-key header. Naiza applies rules and risk signals to the event. It returns a decision and a score from 0 to 100. The customer's product can enforce the decision or send the event to review. Naiza also screens individuals and entities against sanctions, politically exposed person (PEP) and other watchlists. It returns structured match context for a documented review workflow. Naiza stores and processes fraud events, customer records and AML screening data in Saudi Arabia.

Capabilities

Custom rules use expression-based logic, priority ordering and cumulative scoring, and can be enabled or disabled without deployment.
Device intelligence provides device fingerprinting on web, iOS and Android, which Naiza says helps catch account takeover and multi-accounting.
Device intelligence also covers fraud ring identification and per-device risk scoring across sessions.
Synchronous and asynchronous processing modes are available for product and operations workflows.
API documentation includes request examples in curl, Node.js and Python.

When to use it

You need real-time risk decisions on logins, payments, registrations and withdrawals.
You need to screen customers, companies and counterparties against sanctions, PEP and watchlist sources.
You need fraud and AML data stored and processed in Saudi Arabia.