# DomainGuard

> 24/7 domain and brand monitoring with rapid takedowns. DomainGuard detects lookalike domains, phishing infrastructure, and brand abuse so security teams can respond before customers are deceived.

DomainGuard is a B2B cybersecurity platform combining managed external monitoring (Owl, Shield, Guardian, and an API integration) with security consulting (penetration testing, application security, social engineering and dark-web research, cloud assessment, detection-coverage validation, and retainer advisory). Founded by industry practitioners; the platform serves enterprises that operate high-value brands, domains, or trademarks.

## Solutions

- [Owl](https://guardyourdomain.com/solution/owl/): Core domain monitoring. Continuous detection of lookalike domains, automated phishing site takedowns, and certificate transparency tracking.
- [Shield](https://guardyourdomain.com/solution/shield/): Brand and identity surface. Detects impersonation across app stores, social media, search ads, the dark web, and key-employee accounts.
- [Guardian](https://guardyourdomain.com/solution/guardian/): External attack-surface monitoring. Continuous discovery and alerting on internet-facing assets including subdomains, exposed services, certificates, and tech stack.
- [API Integration](https://guardyourdomain.com/solution/api-integration/): Programmatic access to DomainGuard threat intelligence for SOAR, SIEM, and custom tooling.
- [Takedowns](https://guardyourdomain.com/solution/takedowns/): Managed phishing and domain takedown service, included with every monitoring tier. Machine detection, human-driven abuse reports to registrars, hosting providers, and platforms, with persistent follow-up and escalation until removal is confirmed.

## Consulting

- [Penetration Testing](https://guardyourdomain.com/consulting/penetration-testing/): External, internal, and gray-box network and infrastructure testing.
- [Application Security](https://guardyourdomain.com/consulting/application-security/): Web, mobile, and API application security assessments.
- [Social Engineering and Dark Web](https://guardyourdomain.com/consulting/social-engineering-dark-web/): Phishing simulations, vishing, and dark-web exposure research.
- [Cloud Assessment](https://guardyourdomain.com/consulting/cloud-assessment/): Configuration and architecture review for major cloud providers.
- [DetectCheck](https://guardyourdomain.com/consulting/detectcheck/): Detection-coverage and logging validation engagements.
- [Retainer Services](https://guardyourdomain.com/consulting/retainer-services/): Prepaid security advisory hours.

<!-- TEMP (2026-08-21): "Threat catalog (defensive research)" section removed
     while we troubleshoot. Restore the section and its /threats/ entries from
     git history when resolved. -->

## Threat research and guides

- [How to take down a phishing site](https://guardyourdomain.com/blog/phishing-site-takedown/): Step-by-step guide covering ICANN/WhoIs lookups, registrar abuse reports, hosting-provider reports (including Cloudflare-proxied sites), and Google Safe Browsing, APWG, and SmartScreen reporting. Free, takes about 15 minutes.
- [Trends in phishing and fraud](https://guardyourdomain.com/blog/trends-in-phishing-fraud/): Industry trend analysis from DomainGuard takedown data.
- [DNS danger zone](https://guardyourdomain.com/blog/dns-danger-zone/): Risks and abuse patterns rooted in DNS misconfiguration and stale records.
- [Video call platforms as scammer tools](https://guardyourdomain.com/blog/video-call-platforms-are-scammer-tools/): How threat actors weaponize free Zoom, Webex, and Teams accounts to run fake job interviews.
- [Catching threats at inception](https://guardyourdomain.com/blog/catching-threats-at-inception/): Why early detection beats post-incident response.
- [Fake university scam](https://guardyourdomain.com/blog/fake-university-scam/): Investigation of a ring of 18 fake universities on .education and .university domains, a checklist for verifying whether a university website is real, and the full list of identified domains.
- [NFT support scam](https://guardyourdomain.com/blog/nft-support-scam-nftishing/): Case study of NFT marketplace impersonation.
- [Vishing scam with deepfakes](https://guardyourdomain.com/blog/vishing-scam-deepfakes/): Voice-based social engineering using AI-generated audio.
- [FOSS domain monitoring tooling](https://guardyourdomain.com/blog/foss-domain-monitoring/): DomainGuard open-source contributions and tooling notes.
- [What the Helm](https://guardyourdomain.com/blog/what-the-helm/): Deployment and security notes from working with Helm.

## About

- [About DomainGuard](https://guardyourdomain.com/about/): Leadership, mission, and approach.
- [Contact](https://guardyourdomain.com/contact/): Reach the team for product demos, takedowns, or consulting engagements.

## Optional

- [Blog index](https://guardyourdomain.com/blog/): All threat research and guides.
- [RSS feed](https://guardyourdomain.com/blog/index.xml)
- [Sitemap](https://guardyourdomain.com/sitemap.xml)