OpenBait Founder / Principal Engineer
Authentication infrastructure engineer at Japanese listed companies (10 yrs)
Ten years running authentication infrastructure — OIDC / SAML SSO, Passkey / FIDO2, DMARC / DKIM / SPF / BIMI — at Japanese listed companies. Daily contact with phishing attacks against those same systems made it clear that the mid-market gap in brand-protection tooling wasn't going to be closed by the existing players.
OpenBait exists to be the platform that bridges typosquat detection, brand impersonation monitoring, and registrar/browser-level takedown for mid-market companies that don't have the budget to run four separate vendors.
How OpenBait implements canary tokens that fire when attackers clone a site, plus a user-side JavaScript SDK that warns real victims — both at mid-market price. Architectural trade-offs, failure modes, and what we deliberately don't do.
从运维视角梳理 Typosquat 检测的 5 种主流方法：dnstwist、Certificate Transparency 日志、新注册域名（NRD）feed、注册局区块文件、搜索引擎／社交监控。每种方法的强项、盲区、以及现场里如何组合。