Agents

Detect and respond
In your agent

Discover malicious infrastructure, spot phishing sites, investigate alerts and take down domains, all from Claude, ChatGPT, Cursor or any MCP client, with your own access.

See supported clients

Works withChatGPT, Claude, Copilot, Cursor or GitHub Copilot

Workflow

Agentic detection, investigation, response

Ask in plain language. Your agent picks the tools for each step, chains them and keeps the evidence in the conversation.

detection

Find attacker infrastructure early

Scan for malicious domains, search certificate transparency for new names, and query across your domains, certificates, traffic and email in one conversation.

ChatGPT: discover domains impersonating us

investigation

See what each domain does

Analyze a domain live: DNS, registration, hosting, the page it serves and what it asks visitors for.

Claude: Investigate acrne.com. Who hosts it, and what does the page do?

response

Act on it in your stack

Turn a finding into a rule, send it to a connected tool or open a takedown, after you confirm.

Slack: make this a rule for new mapped lookalikes

Respond

Turn the answer into a rule or a response

Your agent turns any finding into a detection rule, a SIEM alert or a block. Changes need an organization admin, and your client asks you to confirm each one.

Make it a rule

The search becomes a detection rule that alerts on new matches.

Send it to your SIEM

The finding goes to the SIEM, chat app or webhook you connected, once you confirm.

Block it where you enforce

The domain is blocked in the endpoint, gateway or firewall feed you connected, once you confirm. Your own monitored domains are never blocked.

Works with

Any MCP client, every connector

Ask from Claude, ChatGPT, Copilot, OpenCode or any other MCP client. Your agent works with the connectors you set up, from email telemetry to SIEM alerts and blocks.

  • ChatGPT
  • Claude
  • Microsoft 365 Copilot
  • OpenCode
  • Any MCP client
  • Slack
  • Splunk Enterprise and Cloud
  • Microsoft Sentinel
  • CrowdStrike Falcon
  • Microsoft Defender for Endpoint
  • Microsoft 365 Email Intelligence, Microsoft 365 Quarantine
  • Google Security Operations
  • Google Workspace Intelligence
  • Elastic Security
  • Cloudflare Zero Trust
  • Zscaler Internet Access
  • iboss
  • Tines
  • Webhooks
  • Domain feed

Assistant

Ask without leaving the dashboard

Assistant detects, investigates and responds to threats from any dashboard page, with the same access you have.

  • Shortcut

    CtrlJ

    Open it from the header or with the shortcut. The conversation stays open as you move between pages.

  • Context

    Ask "why is this flagged?" and Assistant answers about the result on your screen.

  • Control

    Before it edits a rule, tags a result or sends a response, it shows the exact change and waits for you.

Assistant

Ask about monitored domains, results, rules, alerts and takedowns. Assistant acts with the access of the signed-in account and asks before changing anything.

Demo replies use sample answers

Clients

Set it up in the tools you already use

Sign in once with your Have I Been Squatted account. Your agent gets the tools your plan includes.

Agents and MCP come with every paid plan: Pro, Business and Enterprise. Higher plans include more usage credits.

Compare plans

ChatGPT and Codex

Install the Have I Been Squatted plugin in Codex today. The ChatGPT listing is on its way.

Setup guide

Claude and Claude Code

Add Have I Been Squatted from the Connectors directory in Claude on the web, desktop or mobile. In Claude Code, install the plugin.

Setup guide

GitHub Copilot

Install the Have I Been Squatted plugin in GitHub Copilot CLI.

Setup guide

Slack

Add the app to your workspace, then mention it in a channel or send it a message.

Setup guide

Microsoft 365 Copilot

Find Have I Been Squatted in the Agent Store, or ask your Microsoft 365 admin to add it for everyone.

Setup guide

Cursor, OpenCode and others

Add this address as a remote MCP server. You sign in the first time you use it.

https://mcp.haveibeensquatted.com/mcp
Setup guide

FAQ

Frequently asked questions

Set up your agent
With one prompt

Paste the setup prompt into Claude Code, Codex, Cursor, GitHub Copilot or OpenCode. Your agent connects the server, opens the sign-in and shows the tools your plan includes.

Documentation

Works withChatGPT, Claude, Copilot, Cursor or GitHub Copilot