Features

Everything you need to protect your brand

Comprehensive typosquatting detection and domain monitoring with advanced analytics, automated workflows, and real-time intelligence.

Protect your brand with automated monitoring, takedowns and anomaly detection in minutes.

Get started

Domain protection

Your domains, protected

Catch malicious domains before they cause harm. Monitoring, prioritised alerts, and coordinated takedowns with evidence you can act on quickly.

Domain monitoring

Continuous coverage with prioritised alerts when risky or abusive domains appear.

Takedowns

Request and coordinate takedowns with clear evidence, from registrars and hosts through to escalation when you need it.

Deep analysis

DNS, certificates, and infrastructure signals in context so you can decide fast.

Rules & alerts

Define custom rules and receive instant alerts for critical domain events.

Reports & integrations

Export evidence and summaries for stakeholders, and connect monitoring to the rest of your stack via API.

Data & intelligence

Deep insights across every signal

Comprehensive data collection and analysis to uncover threats hiding in plain sight.

Horizontally scrolling rule engine field names.
permutation dns_tlsa favicon.dhash sitemap.broken_link_count business_intel.address_count classification.impersonation registration_metadata.url origin_x509.not_before origin_x509.ocsp_uris certificate_transparency.labels.domain
kind dns_srv sitemap.url sitemap.external_link.target_host business_intel.source_url_count geolocation.asn.number registration_metadata.server origin_x509.not_after origin_x509.crl_dp certificate_transparency.labels.registrable_domain
created_on dns_naptr sitemap.title sitemap.external_link.target_url ports.port geolocation.asn.name registration_metadata.nameservers origin_x509.san_dns redirect_chain.certificate.issuer certificate_transparency.labels.subdomain
levenshtein_distance dns_ptr sitemap.status_code sitemap.external_link.link_text ports.address geolocation.country registration_metadata.dnssec_status origin_x509.san_dns_count redirect_chain.certificate.subject_name screenshot_url
tags dns_dnskey sitemap.depth sitemap.external_link.source_host ports.finding_count geolocation.continent registration_metadata.delegation_signer origin_x509.san_ip certificate_transparency.name whois
dns_a dns_ds sitemap.parent_url sitemap.external_link_count ports.unique_port_count registration_metadata.registration_date registration_metadata.privacy_proxy origin_x509.ttl_days certificate_transparency.is_precert
dns_aaaa smtp sitemap.entry_count business_intel.company_names ports.unique_address_count registration_metadata.expiration_date registration_metadata.icann_complaint_link origin_x509.key_alg certificate_transparency.log_id
dns_cname http_banner sitemap.broken_link.kind business_intel.phone_numbers redirect_chain.url registration_metadata.updated_on registration_metadata.reseller origin_x509.key_size_bits certificate_transparency.index
dns_txt technologies sitemap.broken_link.page_url business_intel.addresses redirect_chain.status registration_metadata.registrar origin_x509.subject_dn origin_x509.sig_alg_oid certificate_transparency.occurrences_count
dns_ns favicon.url sitemap.broken_link.target_url business_intel.source_urls redirect_chain.kind registration_metadata.registrar_iana_id origin_x509.issuer_dn origin_x509.is_ca certificate_transparency.last_seen_ts
dns_mx favicon.content_type sitemap.broken_link.link_text business_intel.company_name_count classification.phishing registration_metadata.registrar_abuse_contact origin_x509.fingerprint_sha256 origin_x509.path_len certificate_transparency.labels.tld
dns_caa favicon.sha256 sitemap.broken_link.status_code business_intel.phone_number_count classification.malware registration_metadata.status_codes origin_x509.serial origin_x509.policy_oids certificate_transparency.labels.etld1

Screenshots

Capture and archive screenshots automatically so you keep visual evidence on file for every domain you track.

Certificate Transparency

Trace certificate issuance over time with transparency logs and full history on every lookup you run.

GeoIP & ASN data

See ASN, hosting provider, and geography together so infrastructure context never lives in a silo.

Port scanning

Map listening services and open ports next to DNS and TLS so attack surface stays in one place.

Website crawling

Crawl rendered pages, links, and site structure so you see what visitors experience end to end.

Business intelligence

Layer org context and enrichment signals so credible impersonation stands apart from routine noise.

Fortify your brand security today

Join cybersecurity professionals who trust Have I Been Squatted to protect their brands from threats.