Skip to content

Brand Protect Documentation

Brand impersonation monitoring for the Oktoboot threat intelligence platform

Oktoboot Brand Protect continuously monitors the threat surface around a brand’s assets — its owned domains, keywords, and social handles — and surfaces lookalike domains (typosquats, homoglyphs, TLD abuse) and impersonating profiles before they cause damage.

Every finding is enriched with DNS, WHOIS/RDAP, TLS, HTTP, screenshot, and hosting-infrastructure data, scored by an adaptive model, and reviewed by an LLM auditor that can adjust scores, flag false positives, and recommend a response.

Getting Started

Install the stack with Docker Compose, configure your brand profile, and run your first scan in minutes.

Architecture

A Rails 8 web application orchestrates a Python 3.14 microservice over a token-authenticated REST API and Redis pub/sub.

Scan Pipeline

Eight stages from domain and social discovery through enrichment, scoring, AI auditing, and PDF report generation.

Usage Guide

The dashboard, analyst triage queue, takedown workflow, and admin controls.

Reference

Environment configuration, the internal service-to-service API, AI providers, threat feeds, and webhooks.

Development

Local setup, testing, CI/CD, observability, and contributing.