Quickstart
Go from signing up to a report page on your help page in three steps.
To start with OpenBait, you need a report page of your own and a link to it where your customers will see it. No DNS changes, no script on your site.
Step 1: Create your organization
- Sign up. You don't need a password: sign in with an email link, Google, GitHub, or a passkey
- On the Create Organization screen, enter the Organization Name (your brand name) and your Primary Domain (your real website)
OpenBait uses your Primary Domain to tell your real site from a phishing site.
Step 2: Get your report page link
Once your organization exists, the next screen shows your report page:
https://openbait.com/report/your-brandTry it now: open the report page in a new tab and paste your own homepage URL. It tells you right away that this is your official site.
Step 3: Put the link where customers will see it
Three places work well. The same screen gives you wording you can use as is.
| Where | Example wording |
|---|---|
| Help page (FAQ) | "Report a site pretending to be [Company]" |
| Email footer | "Received a suspicious email from us? Report it here:" |
| Sign-in page | "Not sure this is the real [Company]? Check any link here:" |
The most effective move is to replace any phishing@ address you give customers today with this link. To change what the page shows, go to Settings > Public Intake in the console.
When a report arrives, we notify you and show the answer the customer already got. We don't send takedown reports to hosting providers or registrars (paid plans, or a single $199 takedown on Free) until you confirm the site.
Next steps
- Alerts: who gets notified, and webhooks
- Domain allowlist: add your own and your partners' official domains so they are never flagged