Offer resellers protection from lookalike domains
DefendDomain finds web addresses made to look like a company's own, such as yourcustomer-invoices.com, and gets them taken down if they are used for fake invoices or a copied website. Your resellers sell it to their customers. We run the service.
Our partnerships team replies with the programme terms.
What distributors get
- Margins for you and for your resellers. Ask for partner terms and we will explain them.
- Sales and product training for your resellers
- Co-marketing with you and your resellers
- Deal registration. Ask us how it works for your resellers' deals.
Who does what
DefendDomain
Runs the service: hourly checks on around 500 lookalikes of each customer domain, alerts with evidence, takedown reports and automatic follow-ups.
You, the distributor
Recruit and supply resellers, train their sales teams with our material, and run co-marketing with us.
Your resellers
Find customers and sell to them.
Your resellers' customers
On Pro, they read the alerts and approve each takedown with one click. On Enterprise, our analysts check every alert and run the takedowns.
Ask for partner terms to find out who holds the customer contract, who invoices, who sets up each customer and who gives first-line support.
We also sell direct to companies. Ask us how deal registration works for your resellers' deals, and whether your region is open.
How to explain DefendDomain to a customer
Criminals register a web address that looks like your customer's, such as yourcustomer-invoices.com. They use it to email new bank details to the people your customer sells to, or to show a copy of the website. DefendDomain finds these lookalike domains and tells you when one is set up to send email or shows a copy of the site. If one is used in an attack, we get it taken down.
Checked every hour
We watch around 500 lookalikes of each of your customer's domains and re-check every one every hour. We also watch 100+ public certificate logs as new entries appear.
Every alert comes with evidence
Screenshots, who registered the domain, where it is hosted and who handles its email, each with the time it was captured.
One click sends the takedown reports
Once someone confirms a live attack, one click sends the evidence to every place that can act on it, up to 12. If they do not act, we follow up at 48 and 96 hours, then go to the registry. Takedowns are unlimited on Pro and Enterprise.
Where we work
We work with customers in the US, UK, EU and Asia-Pacific. We watch 240+ domain endings, including country endings, and we report to whichever registrar, host or email provider the attacker uses, wherever it is, and chase them automatically until the fake is down.
How this differs from DMARC and email filtering
DMARC, email filtering and Microsoft Defender protect your customer's own domain and inbox. None of them stops someone registering a lookalike domain and emailing the people your customer sells to. DefendDomain watches for those domains.
What we do not do
We do not recover money that has already been paid, remove social media accounts or ads, or protect a real mailbox that has been hacked.
Ask for partner terms
Want the terms first? Leave your email and our partnerships team replies with the programme terms. No phone number needed.
What happens after you apply
- Step 1Our partnerships team reads your application and replies with the programme terms.
- Step 2We arrange a call to go through margins, deal registration and how billing works for your clients.
- Step 3If you go ahead, we set you up as a partner.
Apply to partner
Tell us about your business. Our partnerships team replies with the programme terms and arranges a call to go through them.