Typosquatting is the exploitation of typing mistakes by attackers to mislead users, redirect traffic, or impersonate your organization. With the Typosquatting module, Patrowl helps you detect and manage domain permutations that could lead to security risks such as phishing or brand abuse.

Permutations are variations of your domains generated to simulate common typos or impersonation attempts (e.g., missing letters, swapped characters, or alternative extensions).

Patrowl automatically generates permutations from your top domains identified as part of your exposed attack surface and under protection (EASM or higher).

No. All prioritization and categorization are fully manual. Your team decides how each permutation should be handled.

Yes. Permutations are continuously updated as new data is collected.

Your brand is the primary door to your attack surface. Typosquatting domains can be used for phishing, impersonation, malware distribution, or traffic redirection. All of these can directly impact your users and your brand reputation.

Yes. A permutation is marked as Resolved only when:

The module is intended for security teams such as SOC, analysts, and attack surface management teams.

Only users with Standard access or higher can:

Lower-level users can view data but cannot make changes.

Only top domains that are part of your exposed attack surface and under protection (EASM or higher) are included.

The Typosquatting module focuses on relevant permutations based on your exposed attack surface. It is not an exhaustive scan of all possible domain variations on the internet.