GreyNoise
Internet-scanner and threat-intelligence data source: check whether an IP is opportunistic internet background noise, pull business-service (RIOT) context, run GNQL threat searches, and look up CVE exploitation activity.
Three ways to use GreyNoise
Chat with Geni
Ask Geni to pull data, take actions, or answer questions using this integration in a conversation.
Build a workflow
Create automated workflows that trigger on events, run on a schedule, or chain multiple tools together.
Power an app
Use this integration as a data source or action layer behind a dashboard, form, or internal tool.
Supported tools
Actions your AI agents can perform with GreyNoise.
Bulk CVE Lookup
Look up GreyNoise exploitation intelligence for up to 10,000 CVEs in one request.
Community Lookup
Free-tier lookup of whether an IP is internet noise and/or a RIOT business service, with classification.
GNQL Metadata Query
GNQL search that excludes raw scan data for a lighter, metadata-focused payload.
GNQL Query
Search the full GreyNoise dataset with a GNQL query string; returns matching IPs with intelligence.
GNQL Recall
Hourly historical GNQL records over a time range (Recall time series).
GNQL Recall Stats
Count of unique matching IPs per time interval across a range (Recall statistics).
Get started automating GreyNoise
Ready-to-use workflows
Prompts using GreyNoise
Daily CVE exploitation alerts for your Slack security channel
Each weekday morning, check your CVE watchlist against live GreyNoise exploitation data and alert your Slack security channel only when it matters.
Instant IP address triage in your Slack security channel
Paste a suspicious IP into your security channel and get an instant, plain-language verdict on whether it's harmless scanner noise or worth investigating.
Daily GreyNoise threat brief for your security team
Every weekday morning, turn GreyNoise internet-scanning data into a short, prioritized threat brief and email it to your security team automatically.
Daily GreyNoise IP reputation sweep in Google Sheets
Every morning, check your tracked IP addresses against GreyNoise and write the latest verdict straight back into your spreadsheet automatically.
