Skip to main content
Partner programme

Apply to partner with DefendDomain

DefendDomain finds web addresses made to look like your clients' and gets them taken down when they are used in an attack. Tell us about your business and which kind of partner you are. If you are not sure, pick the nearest one.

What happens after you apply

  1. Step 1Our partnerships team reads your application and replies with the programme terms.
  2. Step 2We arrange a call to go through margins, deal registration and how billing works for your clients.
  3. Step 3If you go ahead, we set you up as a partner.

Want the terms before you apply? Ask for partner terms with just your email.

Apply to partner

Your company

Your details

Our partnerships team replies with the programme terms. By applying, you agree to be contacted by them.

Partner tiers and what each one includes

Your tier is set by the number of client companies DefendDomain protects through you. Your margin or commission depends on your tier. Ask for partner terms and we will explain them.

Refer

  • Bronze · 1–24 client companies
  • Silver · 25–49 client companies
  1. You introduce a client
  2. We sell and send the invoice
  3. You earn commission

Resell

  • Gold · 50–99 client companies
  • Platinum · 100+ client companies
  1. You sell and send the invoice
  2. We deliver the service
  3. You keep the margin
What each tier includes. Every tier gets sales and product training, a demo environment and deal registration.
ReferResell
BenefitBronze1–24Silver25–49Gold50–99Platinum100+
Co-branded marketing materialNot includedIncludedIncludedIncluded
Shared leadsNot includedIncludedIncludedIncluded
Resell and bill your clients yourselfNot includedNot includedIncludedIncluded
Marketing development resourcesNot includedNot includedIncludedIncluded
Priority supportNot includedNot includedIncludedIncluded
Early look at new featuresNot includedNot includedNot includedIncluded
Dedicated account managerNot includedNot includedNot includedIncluded
Joint business planningNot includedNot includedNot includedIncluded

Ask us how deal registration works. If your own staff look after your clients' security, also ask which tiers get the partner console (all your clients in one login) and how alerts and support work at your tier.

Apply to partner

Our partnerships team replies with the programme terms.

How to explain DefendDomain to a client

Criminals register a web address that looks like your client's, such as yourclient-invoices.com. They use it to email new bank details to the people your client sells to, or to show a copy of the website. DefendDomain finds these lookalike domains and tells you when one is set up to send email or shows a copy of the site. If one is used in an attack, we get it taken down.

A

Accounts Receivable

<accounts@yourclient-inc.com>

Updated bank details for outstanding invoices

Please note our bank details have changed. Kindly pay all open invoices to the account below from today.

Remittance advice.pdf
Flagged: lookalike domain
  • Newly registered
  • Set up to send email, no website
  • Uses your client's company name

Your client's real domain is yourclient.com

Example: a fake invoice email from a lookalike of your client's domain, and what we flag about it.

Checked every hour

We watch around 500 lookalikes of each of your client's domains and re-check every one every hour. We also watch 100+ public certificate logs as new entries appear.

Every alert comes with evidence

Screenshots, who registered the domain, where it is hosted and who handles its email, each with the time it was captured.

One click sends the takedown reports

Once someone confirms a live attack, one click sends the evidence to every place that can act on it, up to 12. If they do not act, we follow up at 48 and 96 hours, then go to the registry. Takedowns are unlimited on Pro and Enterprise.

yourcompany-login.com
Evidence sentExample

Can switch it off

Registrar · Hosting provider · Email provider · Abuse-report networkSent

Blocklists and threat feeds

Spam blocklist · Abuse database · Phishing feedSent
Malware feedSkipped: no malware

Browser warnings and search

Browser warning lists (2) · Search engines (2)Sent

11 of the 12 places applied. If nothing happens, we chase at 48 and 96 hours.

Example: the takedown reports for a fake login page. yourcompany.com is a placeholder.

Where we work

We work with customers in the US, UK, EU and Asia-Pacific. We watch 240+ domain endings, including country endings, and we report to whichever registrar, host or email provider the attacker uses, wherever it is, and chase them automatically until the fake is down.

How this differs from DMARC and email filtering

DMARC, email filtering and Microsoft Defender protect your client's own domain and inbox. None of them stops someone registering a lookalike domain and emailing the people your client sells to. DefendDomain watches for those domains.

What we do not do

We do not recover money that has already been paid, remove social media accounts or ads, or protect a real mailbox that has been hacked.

Ask for partner terms

Want the terms first? Leave your email and our partnerships team replies with the programme terms. No phone number needed.

Our partnerships team replies by email with the programme terms.