Controls that keep the service inside your policy

Controls that keep the service inside your policy

A managed service only works if you control what it does in your name. ChainPatrol gives you an allowlist for your official assets, an approval step you can turn on for everything or for edge cases, brand rules that shape detection, and an audit log of every change.

A managed service only works if you control what it does in your name. ChainPatrol gives you an allowlist for your official assets, an approval step you can turn on for everything or for edge cases, brand rules that shape detection, and an audit log of every change.

The controls

The controls

ControlWhat it does
AllowlistYour official domains, accounts, apps and addresses, left out of automatic detection and used as the baseline fakes are compared against
Admin approvalObligatory Organization Admin Approval makes your admins review threats before they’re blocked or filed, for every asset type or only some
Edge-case escalationWith approval off, confirmed threats move ahead and we still bring gray areas, like fan accounts and staff profiles, to you
Brand rulesIncluded and excluded terms, brand colors and tickers per brand, with executives set up as their own brands
Review queueApprove or reject the cases we bring to you, in the app, through the API or in Slack
Audit logWho changed what and when, across your organization, brands and settings

How approvals fit the workflow

How approvals fit the workflow

You decide where the line sits.

You decide where the line sits.

01

01

Choose the scope

Keep approval on for every case, limit it to some asset types, or leave it off and review only the edge cases we escalate.

02

02

Get notified where you work

Escalations and daily review reminders arrive by Slack, Discord or email.

03

03

Decide in one click

Approve or reject on the Review page, through the API, or in Slack.

04

04

Everything is logged

Each decision and settings change is recorded in the audit log.

Approve only what needs you

Approve only what needs you

You can approve only the gray areas and let confirmed phishing and fake support accounts go straight to filing, where speed matters most. Or keep approval on for every case.

You can approve only the gray areas and let confirmed phishing and fake support accounts go straight to filing, where speed matters most. Or keep approval on for every case.

If something official gets flagged

If something official gets flagged

Reject the finding or add the asset to your allowlist, and it’s left alone. If a site of yours is blocked by mistake, a dispute sends it to a person for review, and once it’s confirmed as legitimate it’s allowed and added to the allowlist.

Reject the finding or add the asset to your allowlist, and it’s left alone. If a site of yours is blocked by mistake, a dispute sends it to a person for review, and once it’s confirmed as legitimate it’s allowed and added to the allowlist.

What controls include

What controls include

Allowlist

Official assets left out of automatic detection.

Admin approval

Review before anything is blocked or filed.

Brand rules

Terms, colors and tickers set per brand.

Review queue

Approve or reject the cases we bring to you.

Audit log

Every change recorded with who and when.

Admin-only settings

Only owners and admins can change controls.

Frequently asked questions

Yes. With Obligatory Organization Admin Approval on, your admins review threats before they’re blocked or filed. It can cover every asset type or only some.

In Slack, Discord or email, with daily reminders for anything still waiting. You can decide in the app, through the API or in Slack.

Allowlisted assets are left out of automatic detection. If a new official asset gets flagged, reject it or add it to your allowlist.

Organization owners and admins. Changes are recorded in the audit log.

See the controls in the app

See the controls in the app

Book a 30-minute demo and we’ll show you how approvals and allowlists work.

Book a 30-minute demo and we’ll show you how approvals and allowlists work.