What we do
Everything Monitelia does — together with what it does not. The limits are written next to the capabilities, because you will find them anyway: in a trial, in the first month, or in front of your own board. Better here.
45 items, checked against the code on 2026-08-15. Only what runs in production today — not plans.
Module
External DSPM
What of yours is already exposed — leaked credentials, secrets in public code, breach appearances, posture and email auth.
Email and infrastructure
People are sending mail as you, because your domain currently allows it.
SPF, DKIM, DMARCWorks
SPF syntax and its DNS-lookup count against the RFC limit of ten, DKIM on the commonly used selectors (a key under an unusual selector can be missed), DMARC policy and coverage.
DMARC aggregate (RUA) reportsWorks
XML parsed with the country of every sending source — you see who is mailing as you and whether they pass authentication.
MTA-STS, TLS-RPT, BIMI, DANEWorks
All four. Together they decide whether your inbound mail can be intercepted.
DNS and certificate healthWith a limit
Certificate expiry, TLS version, blocklists, the DNSSEC chain, CAA, zone transfer (AXFR), open resolvers and NS/SOA consistency. Subdomain takeover is checked against a list of known hosting services, so a dangling record on a service outside that list is not caught.
Uptime and certificatesWorks
HTTP and TCP checks with incident tracking and alerts.
Module
Brand Threat Manager
Who is pretending to be you — lookalike domains, phishing, fake apps and profiles, marketplace listings — and the takedown that follows.
Domains and lookalikes
Someone registers a domain that looks like yours and collects your customers' logins on it.
Finding lookalike domainsWorks
Up to 220 variants per root: typos, homoglyphs, Cyrillic↔Latin substitution, TLD swaps, and combinations with keywords like login or support.
Certificate Transparency watchWorks
A new certificate on a lookalike domain appears in Certificate Transparency within minutes — usually before the site itself is running.
Confirming it is really phishingWorks
The page is loaded and checked for signs of a live credential form. A parked domain and a live credential form are different problems with different urgency.
Managing your own domain portfolioWith a limit
We watch your own domains' registration: an alert 30 and 7 days before expiry, and when the registrar or name servers change. We do not hold the domains: auto-renew and registry lock stay with a corporate registrar.
TrademarksWith a limit
We watch USPTO and EUIPO filings and flag conflicting ones. We are not an ICANN TMCH agent — Sunrise registrations and Trademark Claims cannot be filed through us.
Takedown and evidence
You found the fake. Now it has to come down, and stay down.
Finding who to complain toWorks
Registrar and hosting abuse contacts, plus the report channels for Meta, Google Play, the App Store, Amazon, Telegram and others.
Drafting the noticeWorks
Written for the specific recipient: a registrar is cited its own abuse policy, a host its acceptable use, a platform its impersonation rules. A person sends it.
Verifying it actually came downWorks
The target is re-fetched every six hours. Removal is recorded only after two consecutive absences — one failed request and a successful takedown look identical, and closing on one would report something that never happened.
Watching for its returnWorks
Ninety days after removal. The metric is not "taken down" but "stayed down" — coming back on new hosting is the usual next move.
Timestamped evidenceWorks
SHA-256 over a canonical manifest and an RFC 3161 timestamp from an external authority. It verifies with openssl and no cooperation from us; the record is append-only, not editable.
Running UDRP casesNot offered
We assemble the evidence bundle; lawyers file the case. We do not act as representatives in disputes.
Other impersonation
Fakes are not only domains.
Fake accountsWorks
Variants of your handle checked on X, TikTok, YouTube, LinkedIn, Facebook and Instagram.
Executive impersonationWorks
The same for named people — names and aliases, with their real accounts excluded.
Fake appsWorks
App Store and Google Play.
Ads run in your nameWith a limit
Facebook and Instagram ads. Google Ads and TikTok Ads are not covered.
Counterfeit listingsWith a limit
Amazon and Google Shopping. OLX, Prom and Rozetka are in progress.
Leaks and exposed credentialsWith a limit
Known public breaches, secrets exposed in public code and paste sites, and public phishing and malware lists. Tor, ransomware leak sites and stealer logs are not read.
PiracyWorks
Your product searched for on warez sites.
Module
Info-Ops Analyzer
What is being said and whether it was pushed — mentions, sentiment, story clustering and coordination markers.
Mentions and reputation
People are talking about you where you are not looking.
PressWorks
News per market, international news coverage, and RSS feeds you add. Language and country come from the source.
Social networksWith a limit
Reddit, YouTube and Mastodon by keyword. Instagram and Threads by keyword, and Instagram hashtags through your Business account. Facebook: your own Page plus public Pages you list. X: only what search engines index and the accounts you name, with no keyword search of X itself. LinkedIn: your own Page, your Page analytics export, and what search engines index.
TelegramWith a limit
Channels you add. Telegram has no public cross-channel search, so a channel nobody listed stays invisible.
TikTok, Viber, WhatsAppWith a limit
TikTok videos by keyword, plus what search engines index. Viber: communities named after your brand, not what is said inside them — its messages are not public. WhatsApp: nothing; zero there means nobody listened, not that nobody spoke.
Sentiment and topicsWorks
Positive, neutral, negative, plus a category — complaint, praise, question, comparison, news. Ukrainian on the same footing as English.
Who exactly is writing about youWorks
A registry of outlets and creators: factuality, political lean and ownership, kept separate from reach. Each rating carries its source and date; an unrated outlet reads as unrated, never as neutral.
Logo in imagesWorks
Brand recognition in pictures attached to mentions.
Story clustering & coordinated pushesWorks
Mentions are grouped into stories by shared wording (not topic), four times a day. Each story carries reach, outlet count, sentiment split, the tightest posting window and peak wording overlap — near-verbatim repetition across many outlets in a tight window is what a coordinated push looks like. Whether a story reached credible outlets is assessed only when the outlet registry holds ratings; otherwise it says 'not assessable' rather than guessing.
Search and AI
You need to be visible where people look for you.
Technical site auditWorks
A full crawl listing the issues and why each one is an issue.
Search positionsWorks
Google. When Google results are unavailable it falls back to DuckDuckGo, and says DuckDuckGo rather than passing it off as Google.
Visibility in AI answersWorks
Nine models: whether they name you, who they name instead, and in what tone.
BacklinksWorks
Link profile and referring domains, with link-health checks that flag broken and lost backlinks, and manual/CSV import of a known link list.
Brand SERP monitoringWorks
The Google page-one for your brand name, each result classified owned, negative or neutral, with an alert the moment a reputation-damaging page enters the top 5.
App store audit (ASO)Works
Your own App Store and Google Play listing audited — metadata, ratings, and keyword-position tracking for the app.
Search ConsoleWorks
Your own Google data connected in.
Platform
How this fits into the way you already work.
AlertsWith a limit
Email, Slack, Telegram, webhook. MS Teams and SIEM in CEF are not there yet.
ReportsWorks
PDF, DOCX, XLSX, CSV; on a schedule; a public link with a PIN; with your logo and colours.
APIWorks
REST with scoped tokens and rate limiting. Power BI and Looker Studio connect directly.
Data taps (pull feed)Works
A read-only, rule-filtered endpoint another system polls for your notifications, each scoped by its own revocable token.
White labelWith a limit
Your domain, logo and colours on reports and client dashboards. Email templates are still ours.
Reseller consoleNot offered
Margin-based billing works; a separate console for onboarding and running your own clients does not exist yet. In development.
SSO, SCIM, IP allowlistNot offered
Email and password, or a magic link. SAML and SCIM for corporate directories are not supported.
Why there are no comparisons here
"Us versus them" tables are almost always arranged so that whoever built the table wins. We describe only our own product, so the only thing left to check is whether what we say about ourselves is true — and half an hour of a trial settles that.
If you are weighing us against a specific tool and the row you need is missing, write to us. We will answer plainly, including "they do that better".