Automated Social Media Liveness Checks

Automatically verify the offline status of reported threats across Instagram, Facebook, and YouTube.

Median Time to Takedown Analytics

Monitor performance against takedown SLA targets and track median resolution times with dedicated charts on the metrics page.

Pending Evidence Takedown Workflow

Track reports waiting on customer verification or additional evidence with a dedicated Pending Evidence state.

Self-Service Dark Web Search

Search exposed domains with masked password previews and custom query builder options.

Customizable Security Portal Banners

Add custom guidelines banners with full markdown and HTML support to public security portal reporting pages.

Report Favoriting

Star important reports and filter for favorites directly within the reporting dashboard.

Official SDK & CLI 1.0.0 Releases

Released @chainpatrol/sdk and @chainpatrol/cli 1.0.0 on npm with full typed API coverage across organizations, detections, takedowns, and asset checks.

Unified Threat Activity Timeline & Lifecycle Summary

Inspect a complete activity timeline and lifecycle summary across Search, Report, and Takedown drawer views to see detection, blocklist, and takedown progression at a glance.

Dark Web Monitoring

Added dark web monitoring features to track credential leaks, account exposures, and related domain threats.

Security Portal Customization

Customize public security portal URL slugs independently from organization names for cleaner public branding.

Enhanced Filtering & Timestamps

Filter Blocklist and Takedown views by First Detected Date, quickly multi-select asset types, and view exact timestamps with local timezone tooltips.

Smarter Brand Setup and Management

Brand onboarding got much easier with Fill from Link for X/Twitter profiles, plus improved brand data controls for tickers, topics, and trademark records at the brand level.

This reduces manual setup time and improves detection quality by keeping brand context more complete and structured.

Broader X/Twitter Protection

X/Twitter coverage expanded to include more high-signal activity, including quote-based patterns and richer account-context detection.

The result is wider scam and impersonation coverage with better signal quality and less analyst noise.

Ad Library Asset Coverage

ChainPatrol added dedicated support for Google Ads and Bing Ads assets with new GOOGLE_AD and BING_AD asset types.

Ad-library URLs are now parsed into structured identifiers (including advertiser, creative, and ad IDs where available), enabling higher-precision ad abuse detection and faster actionability.

Expanded Platform and Asset Coverage

ChainPatrol expanded support across more threat surfaces, including Rednote asset support, stronger Instagram coverage, and new automated provider flows for DigitalOcean, Zapier, and Calendly.

Additional Hosting and Domain Coverage

We added broad new hosting and domain parsing coverage across providers and PAGE domains, including infrastructure like Wasmer, EdgeOne, Boxmode, Tumblr-hosted pages, and expanded TLD-to-provider routing (including Google Registry and Radix domains).

Brand Audit Logs & Settings

Track changes to brand configurations and protection settings with dedicated audit logs, and manage brand tickers and topics directly from brand settings.

Interactive Dashboard Drilldowns

Click on bar chart time buckets in the dashboard to open the blocklist or takedowns list with the matching date filter pre-applied.

Direct Watchlist Addition from Detections

Send suspicious assets directly to an organization’s watchlist straight from the Detection screen.

Official CLI Initial Release

Published the initial @chainpatrol/cli package to npm for automated and terminal-based workflows.

Supporting Evidence for Reports

Reports via Slack and Intercom now support adding additional attachments as evidence. Add screenshots, files, and .eml files to provide evidence to hosting providers and platforms of abuse.

These updates make it easier to investigate threats, preserve supporting evidence, and allow users to have more control for what data gets submitted with reports.

Default Organization Setting & Trademark Improvements

Users who belong to multiple organizations can now choose a default organization to redirect to when logging in. Organization settings were also expanded to support a Name of the Rights Owner field in trademark registration records.

These changes make multi-account access smoother and improve the completeness of brand enforcement information stored in ChainPatrol.

Twitter Detection in Replies & Mentions + URLScan Hostname Detection

Profile protection on X/Twitter now scans both replies and mentions, expanding coverage for impersonation and support-scam activity targeting protected accounts. URLScan detection sources were also improved with hostname-based detection and org-aware default queries, helping surface newly observed attacker infrastructure without requiring every customer to manually configure searches.

Platform Coverage Expansion

ChainPatrol expanded support across additional asset types, platforms, and takedown targets during February:

• Rarible NFT asset support

• New takedown coverage for Issuu, Letterboxd, and Vercel-hosted domains

• Flathub, SoundCloud, VidLii, Vevioz, and Zapper platform support

This expands the range of surfaces customers can monitor, normalize, and take action on directly inside ChainPatrol.

Additional Improvements

• Reports now include blockchain explorer links for contract addresses, making Web3 investigations faster from the report view.

• Liveness check workflows were also improved with clearer status feedback and domain-hold detection, helping distinguish assets that are still online from domains already disabled at the registrar level.

Audit Logging and Admin Governance

Audit logging is now available in the settings page to see changes to your organization settings over time. Logs include events for changes to brand protection configuration, API key setting updates, member additions/removals/role updates, and service-level changes.

Takedowns Tasks and Details

Improved takedown task details available in your ChainPatrol dashboard. ChainPatrol continues to handle takedowns from domain registrars to social media platforms. Threat takedowns require different approaches depending on platform and asset type with various responses.

This change gives better visibility into the unique updates per takedown. With this view, organizations can see initial filings, re-filings, as well as platform responses.

Threat Fingerprints and Detection Improvements

ChainPatrol now tracks new threat fingerprints and includes a dedicated fingerprints page with UI improvements for investigation and review.

These upgrades make it easier to identify repeated attacker infrastructure and patterns across reports. Analysts can correlate incidents faster and carry more context between triage, review, and remediation decisions.

Platform Coverage Expansion

Expanded coverage across additional blockchain assets, social/video platforms, and hosting pages:

• Address ecosystems - Soneium address support

• Social/video platforms - Bilibili, Bluesky, Vimeo, Dailymotion

• Web hosting pages - zapier.app, codepen, irys.xyz

Audit Logging

Audit logs now track all critical actions across your organization, including member changes, assets, service settings, and API keys.

Each event includes before/after values, timestamps, and user context—making compliance, security reviews, and troubleshooting significantly easier.

Customer Review & Escalations Workflow

Customers now have a direct way to have final approval for threats we add to the blocklist on your behalf. After enabling, customers can configure which asset types need a customer's final review and which assets types can automatically be added to the blocklist.

Review labels and decision information persist to the final approval, making the customer decision easier to apply.

Slack Org Connect & Escalation Alerts

Teams can connect dedicated Slack channels to receive real-time notifications for escalations and reports.

Escalation alerts include threat details and direct links to the review page, ensuring urgent escalations and threats are never missed.

Automated Takedowns & Scanning Capabilities

Automated takedowns now support additional providers including GoDaddy, Vercel, Registrar.eu, Tucows, Public Domain Registry, Hostinger, Cloudflare, and Webflow.

Automated form filling and custom takedown notes reduce manual effort while improving tracking and context.

Public API

New public API endpoints are available, allowing more programmatic access to ChainPatrol data. Full API key management from the dashboard.

The API now includes new dedicated endpoints for organizations, takedowns, and reports:

• GET /organization/assets - List organization assets with filtering and pagination

• POST /organization/assets - Batch add assets to organization allowlist

• PUT /organization/assets/{assetId} - Update an organization asset

• DELETE /organization/assets/{assetId} - Delete an organization asset

• GET /organization/asset-groups - List organization asset groups

• POST /organization/asset-groups - Create an asset group

• PUT /organization/asset-groups/{groupId} - Update an asset group

• DELETE /organization/asset-groups/{groupId} - Delete an asset group

• GET /organization/metrics - Get organization metrics with date range and brand filtering

• GET /organization/reports - List organization reports with filtering and pagination

• POST /takedowns/list - List takedowns for an organization with filtering

• POST /threats/list - List threats for an organization

• POST /reports/search - Search reports by asset contents within an organization

The following endpoints are now deprecated:

• POST /public/getOrganizationReports

• POST /public/getOrganizationMetrics

See more implementation details at https://chainpatrol.com/docs/external-api/overview

Metrics & Dashboard Improvements

Dashboard performance has been improved with faster load times and more accurate real-time data.

New public metrics endpoints enable more integration with ChainPatrol metrics to view external reporting and analytics data.