Managing domains in Source Defense allows control over which domains are allowed to send data to Source Defense, ensuring full visibility and control over your client-side data sources. This capability also aids in identifying phishing websites that replicate your site's code and detecting unauthorized use of your site's Source Defense tag.
Access the Manage Domains feature by navigating to Settings in the left menu, selecting Sites, and then opening the Manage Domains tab, as illustrated in the Step-by-Step section below.
Domain Statuses
- Unknown Domains: These are domains utilizing your site's Source Defense tag without being listed in your authorized domains. Such domains are flagged as "unknown," and their data is automatically filtered unless action is taken. Detection of these domains triggers in-app alerts, as well as email and webhook notifications if configured.
Authorized Domains: Domains explicitly approved to transmit data to Source Defense from your website. Data from these trusted domains is displayed in your Source Defense dashboard.
Unauthorized Domains: Domains explicitly prohibited from sending data to Source Defense from your website. When unauthorizing unrecognized domains, it's crucial to investigate the source of the domain using your site's Source Defense tag.
Step-by-step
- Log into your Source Defense account
- Navigate to Sites
- A red exclamation mark (!) will appear in the status column when unknown domains are identified.
- Click on the site you want to manage
- Open the Manage Domains tab
Manage domains tab
1. Unknown Domains Detected
These are domains recently detected sending data to your site that have not been reviewed.
-
How to decide:
- Authorize it if you recognize and trust the domain
- Mark as Unauthorized if the domain is unrecognized or unnecessary
2. Unauthorized Domains
These domains have been explicitly blocked and will not send data.
- You can re-authorize if needed or delete them from the list (they will return to Unknown if detected again).
3. Authorized Domains
These domains are trusted and approved to send data.
- You can manually add a domain using the ADD button.
- You can also remove a domain to stop accepting its data.
- You can authorize up to 200 domains per site.
Notifications You'll See
- Bell Icon: Alerts you when new unknown domains are detected
- Email Alerts: Immediate and weekly email summaries (can be configured in the user notifications page)
- Webhook (for integrations): Optional alert sent to your system when new unknown domains are found
Tips for Best Use
- Review new domains regularly
- Remove domains that are no longer in use
- Keep your list clean to maintain visibility and compliance
Need Help?
Have questions or need support? Contact us at support@sourcedefense.com