Setting Up Your Organization

Understanding Organizations

In WebDecoy, an organization is the top-level container for all your resources. Everything you create—domains, decoys, detections, and integrations—belongs to an organization.

Organization Hierarchy

Organization
├── Properties
│   ├── Property A (e.g., "Production Website")
│   │   ├── Domains
│   │   ├── Decoys
│   │   └── Detection Scripts
│   └── Property B (e.g., "Staging Environment")
│       ├── Domains
│       ├── Decoys
│       └── Detection Scripts
├── Integrations (organization-wide)
├── API Keys
└── Subscription/Billing

Organizations as Billing Units

Your subscription and billing are tied to your organization:

• One subscription per organization
• Usage limits apply at the organization level
• Invoices are generated per organization
• Plan upgrades affect all properties within the organization

When to Create Multiple Organizations

Most users need only one organization. Consider multiple organizations if:

Scenario	Recommendation
Single company, multiple websites	One organization, multiple properties
Separate billing for different clients	Multiple organizations
Completely isolated environments	Multiple organizations
Different teams with separate budgets	Multiple organizations

---

Creating Your First Organization

If you’re a first-time user, organization creation happens automatically during onboarding. Here’s what happens:

Automatic Setup During Onboarding

1. You see the onboarding screen after first login
2. Enter your organization name
   • Use something meaningful like your company name
   • Example: “Acme Corporation”
3. Click “Create Organization”
4. WebDecoy automatically:
   • Creates your organization
   • Creates a “Default Property” within it
   • Starts your 14-day trial
   • Adds you as the organization owner
   • Provisions a working example decoy on the WebDecoy shared domain so you have a live honeypot URL the moment you land on the dashboard — no DNS configuration required

Creating Additional Organizations

To create another organization (for separate billing):

1. Contact Support
   • Currently, additional organizations require support assistance
   • Email: [email protected]

Organization Settings

After creation, you can modify your organization:

1. Click your profile avatar (bottom-left)
2. Click Organization
3. Update the organization name if needed
4. Click Save

---

Navigating the Dashboard After Setup

Once your organization is created, you’ll have full access to the WebDecoy dashboard.

Sidebar Navigation

The left sidebar provides access to all features:

┌─────────────────────────┐
│  [Logo] Property ▾      │  ← Select active property
├─────────────────────────┤
│  📊 Dashboard           │  ← Overview and statistics
│  🫆 Actors              │  ← Cross-IP adversary identities
│  ⚡ Enforcement         │  ← WAF pipeline & response actions
│  🤖 AI Bots             │  ← AI crawler activity
│  🔗 AI Referrals        │  ← Traffic referred by AI assistants
│  📝 Citation Monitor    │  ← Where AI cites your content
│  🔔 Detections          │  ← View threat detections
│  🪤 Decoys              │  ← Manage decoy links
│  🧪 Detection Scripts   │  ← Client-side detection
│  🐝 Agents              │  ← Honeypot SSH agents
├─────────────────────────┤
│  🔌 Integrations        │  ← Connector catalog
│  🌐 Domains             │  ← Custom domain setup
│  🔑 API Keys            │  ← SDK authentication
│  📖 Bot Directory       │  ← Known-bot reference
├─────────────────────────┤
│  👤 [Your Profile]      │  ← Properties, Organization,
│                         │    Team, Billing, Logout
└─────────────────────────┘

Property, organization, team, and billing settings live under the profile avatar menu (bottom-left) — not in the sidebar.

Property Selector

At the top of the sidebar, you’ll see a property dropdown:

• Shows the currently active property
• Click to switch between properties
• All data displayed is filtered by the selected property

Dashboard Overview

The main dashboard (/dashboard) shows:

Section	Description
Actors row	Active actors, actors rotating across IPs, and how many are armed on / ready for your WAF
Enforcement loop	Actors qualified → rules armed → locked out at clearance mint
Geographic Map	Detection locations plotted on a map
Detection Signals / AI Scraper charts	Signal and AI-crawler trends over the selected window
Detections & Signal Radar	Detection counts by source, plus the share of detections exhibiting each signal
Actors Rotating Across the Most IPs	Top adversaries ranked by distinct-IP footprint

Use the 7d / 14d / 30d picker (top-right) to change the analytics window.

Key Actions from Dashboard

From the dashboard, you can quickly:

1. View recent detections - Click “Detections” in the sidebar
2. Create a decoy - Click “Decoys” then “New Decoy”
3. Set up a domain - Click “Domains” in the sidebar
4. Configure integrations - Click “Integrations”

Understanding the User Menu

Click your profile avatar (bottom-left) to access:

Option	Description
Profile	View your account details
Current Plan	Shows your subscription tier
Logout	Sign out of WebDecoy

---

Quick Start Checklist

After setting up your organization, follow these steps to get protected:

Recommended Setup Order

• 1. Try the example decoy — a working honeypot URL on the WebDecoy shared domain is auto-provisioned during org creation

  • Hit the URL from your browser via the “Send a test detection” button in the dashboard setup checklist
  • Verify the detection appears in real-time

• 2. Create your own decoys (Decoy Links guide)

  • Add more honeypot links — they default to the shared domain too
  • Deploy them on your website

• 3. Set up a detection script (Detection Scripts guide)

  • Create a scanner configuration
  • Install the JavaScript snippet

• 4. Configure integrations (Integrations guide)

  • Connect your WAF as an enforcement target
  • Set up Slack for notifications

• 5. (Optional) Add a custom domain (Domain Setup guide)

  • Host decoys under your own branded URL instead of the shared domain
  • Decoys keep working on the shared domain — this is purely an upgrade

• 6. Monitor detections (Detections guide)

  • Review incoming threats
  • Analyze threat scores

Time to First Detection

With proper setup, you can have WebDecoy protecting your site and receiving detections within:

Setup Method	Time
Shared-domain decoy (default)	Under 1 minute — the example decoy is live immediately after signup
Detection Script only	5-10 minutes
Decoy links on your own site	15-30 minutes (including HTML deployment)
Custom domain hosting (optional)	15-60 minutes (DNS + SSL provisioning)

---

Organization Limits

Your organization has usage limits based on your subscription plan:

Resource	Trial	Starter	Pro	Enterprise
Properties	1	3	10	Unlimited
Domains	1	5	25	Unlimited
Decoys	10	50	500	Unlimited
Detections/month	1,000	10,000	100,000	Unlimited
API calls/month	1,000	10,000	100,000	Unlimited

View your current usage in Settings → Billing.

---

Next Steps

Your organization is ready, and an example decoy is already live on the WebDecoy shared domain. Common next steps:

• Create Decoy Links — add more honeypots (shared domain by default; no DNS setup required)
• Domain Setup (optional) — host decoys under your own branded URL with DNS + SSL

After exploring decoys, you can:

• Team Management - Invite team members and manage roles
• Managing Properties - Organize resources with properties
• Subscriptions and Billing - Understand plans and limits