What I love about GreyNoise is the peace of mind. It’s like having a digital bouncer that tells you which IP is all talk, shouting at every door, and which one is really trying to pick your lock. There were so many times I’d chase down an alert only to find it was some mass scanner wasting my time. Once we brought GreyNoise into our stack, the false positives dropped dramatically. It's kind of like ThreatLocker in that “default deny” mindset except it’s not blocking executables but does block out distractions. Review collected by and hosted on G2.com.

There is a learning curve for sure, especially at the beginning when you are still trying to sift through what is noise and what is the signal. I’ve had juniors look at a flagged IP and totally panic, only to come back later and see that GreyNoise had this thing tagged as a known scanner for months. And, multiple approvals ala ThreatLocker, sometimes, a little more hand-holding in explanations of classification decisions would do me good from GreyNoise. Review collected by and hosted on G2.com.

Very good at IP classification changes giving us immediate notice when an IP flips state, such as from unknown to malicious. The detection rate in detecting sites engaged in malicious activities is one of the highest because of its real time threat assessments. Review collected by and hosted on G2.com.

There is no any issue with its functionalities but it has some advanced settings that take some time to configure to achieve a robust scan by event type. Review collected by and hosted on G2.com.

What I personally love about GreyNoise is that it feels like having a filter for internet junk traffic—something I didn’t realize I needed until I used it. Before GreyNoise, I wasted hours chasing random IPs scanning my network, only to find out they were harmless internet background noise. Now, my dashboard shows me what actually matters, and honestly, that’s saved my sanity more than once during a hectic day. Review collected by and hosted on G2.com.

What frustrates me sometimes is when the same type of alerts clutter my screen repeatedly, especially during scanning spikes. I’ve also noticed it struggles a bit when integrating with some of our older tools—we had to write custom scripts just to get things talking properly. And like every tool, it’s not perfect at filtering false positives—domain registration alerts especially feel like a recurring headache. Review collected by and hosted on G2.com.

I use GreyNoise for IOC tagging, which is top-notch and helpful in real-time blocking or blacklisting. It assists me in uncovering threat actors' other related infrastructure. The insights provided about threat activity are very helpful. I appreciate their awesome blogs and how GreyNoise helps in writing effective detection rules. The initial setup was trivial and direct. GreyNoise offers more comprehensive threat intelligence data than other tools I have used. Review collected by and hosted on G2.com.

The CVE database needs to have more insight, like Feedly. Review collected by and hosted on G2.com.

It provides us with a central dashboard where we classify malicious websites and get detailed context on IP addresses that scan and attack the internet helping us effectively identify risky breaches and apply rigorous protection that block threats to protect our network. Review collected by and hosted on G2.com.

I haven’t experienced any downside when using it since it’s very possible to secure our organization network from threats using this tool. Review collected by and hosted on G2.com.

What I appreciate most about GreyNoise is how it takes a fundamentally different approach to threat intelligence—it filters out the noise of opportunistic internet scanning, so I can focus only on what truly matters. The concept of identifying "internet background radiation" makes our security stack so much sharper and more efficient. I can easily go from notifications to actionable intelligence, and it works well with the tools I already have. Review collected by and hosted on G2.com.

There is a learning curve initially—especially when trying to understand how to correlate GreyNoise's intelligence with our own alert data. I’ve also found that while the UI is improving, it could be more intuitive for newer analysts who aren't as familiar with interpreting internet scanner data. Sometimes the context is a bit technical unless you're deep in network security. Review collected by and hosted on G2.com.

Very reliable at capturing comprehensive traffic logs to find suspicious activity on the internet with good IP filtering and the ways of dealing with threats are straightforward to a quick resolution. Review collected by and hosted on G2.com.

There is no area that raises negative functionality for me, and it has proved to be useful in assisting me to identify internet anomalies. Review collected by and hosted on G2.com.

GreyNoise is like Cloudflare's lesser-known cousin, but with a superpower—it tells me when I don’t need to worry. I love how it filters out background internet noise, so I’m not chasing false threats or wasting hours investigating harmless scans. It makes it easy for me to tell right away if IPs are visiting my servers and if they are crawlers or real bad actors. The interface is clean, and integrating with SIEM tools is surprisingly straightforward. Review collected by and hosted on G2.com.

Pricing can be hard to figure out especially if you're a small team or an indie developer or even if you're a medium size business. Some of the deeper analytics and tagging feel locked behind paywalls that should be more accessible. Also, like Cloudflare, support responsiveness can be hit or miss unless you're on a higher-tier plan. Review collected by and hosted on G2.com.

I can manage all of the open threats to my devices in one intuitive dashboard and it is quite successful in preventing malicious website pop-windows and malware which helps a lot counter cyber attacks. Review collected by and hosted on G2.com.

It is a very powerful tool. I really like it, however, if I could say anything, it could be even faster in analyzing uploaded JSON files. Review collected by and hosted on G2.com.

I appreciate how it helps us monitor any spoofing made to domains and track IP configuration changes which has been very accurate in helping us to avoid malicious internet traffic. Review collected by and hosted on G2.com.

There are few times I have experienced poor response time while analyzing a large volume of log data subset. Review collected by and hosted on G2.com.