Website visitor identification in three steps.

Learn more

Under the hood

What happens in those ten seconds

When a visit lands, Nalloo reads the network signals (IP, ASN, reverse DNS), filters out bots, VPNs and ISPs, and resolves the organisation behind the request. It then enriches that company from public sources — industry, size, HQ, founded year — and assigns a confidence score so you know how solid the match is.

Everything runs server-side after the page has loaded, so it never blocks rendering. You don't manage data pipelines or enrichment logic — the single script tag does the work and the dashboard shows the result.

The three steps, in depth

From one line of code to a named account

Step one — install. You add a single <script> tag to your site. It is roughly 4 KB, loaded async and defer, so it sits at the end of the browser's work queue and never blocks your page from rendering. There is no SDK to wire up and no data layer to configure. The same tag works on WordPress, Shopify, Webflow, Next.js and plain HTML, and because it understands client-side route changes it tracks single-page apps correctly without extra code. Most teams paste it in once and never touch it again.

Step two — resolve. When a visit lands, the tag sends the network context to Nalloo's EU infrastructure, which works out the organisation behind the request. This is where the resolution cascade runs (below). The result is a company, not a person, enriched from public firmographic sources and stamped with a confidence score so you know how solid the match is before you act on it.

Step three — act. Identified companies appear live in your dashboard with logo, industry, size, location and on-site behaviour. From there you can filter, look a company up manually, export, or push the account straight into HubSpot, Salesforce or Pipedrive via native one-click OAuth — so a warm account becomes a task for a rep without anyone copying and pasting.

The resolution cascade

How an IP becomes a company, in plain English

Resolving a company from a visit is not a single lookup — it is a cascade of signals, each one refining or discarding the last. None of it builds a personal profile.

• ✓ ASN — who owns the network. Every IP address belongs to an Autonomous System, the block of addresses a given organisation or provider operates. The first question Nalloo asks is who runs this network. If it is a corporate network, that is a strong starting point; if it is a consumer ISP, a mobile carrier, a VPN or Tor, the signal is weak and treated accordingly.
• ✓ Reverse DNS — what the network calls itself. Many companies run their own infrastructure, and the reverse-DNS record of an address often names the organisation directly. When a corporate reverse-DNS entry lines up with the ASN, the match becomes far more confident.
• ✓ Firmographics — turning a name into a profile. Once the organisation is identified, Nalloo enriches it from public sources: industry, company size, headquarters, founded year, LinkedIn and tech-stack hints. That is what turns a bare network match into a company profile your team can actually read and prioritise.

When the signals do not converge on a real business — a residential ISP, a VPN exit node, a bot — Nalloo says so rather than guessing. That honesty is the whole point of the next section.

Confidence & billing

Confidence scoring and honest billing

Every match gets a confidence score — very high, high, medium, low or none — based on how cleanly the cascade resolved. This is not decoration: it decides what you pay for. You are billed only on medium-and-above matches, the ones solid enough to act on. Low and none matches, plus bots, VPN and Tor traffic, are shown in the dashboard for transparency but cost nothing.

There are two more guardrails. Seeing the same company again in the same month is free, so an active account researching you repeatedly never inflates your bill. And pay-as-you-go is off by default — you will never get a surprise invoice for going over a limit; you opt in deliberately if and when you want to scale beyond your plan. The free plan includes 50 identifications a month with no credit card, so you can measure your own identifiable rate first. Typically 8–18% of B2B traffic resolves, and higher on corporate networks.

Privacy by design

What happens to the data

Because identification is company-level, there is no personal profile to build. Nalloo does not store personal data, so the legal basis is legitimate interest, not consent. IP addresses are processed hashed and no personally identifiable information is stored — what you keep is a company record with a confidence score, not a person.

All processing and storage happen inside the European Union, in Frankfurt and Madrid, encrypted in transit and at rest. Company-level B2B identification runs on a legitimate-interest basis under the GDPR; you should still reference IP processing for B2B identification in your privacy policy. This is informational and not legal advice. If you want the full reasoning, see our GDPR-friendly overview.

FAQ

Questions, answered.