Skip to content

Setting Up Your Organization

In WebDecoy, an organization is the top-level container for all your resources. Everything you create—domains, decoys, detections, and integrations—belongs to an organization.

Organization
├── Properties
│ ├── Property A (e.g., "Production Website")
│ │ ├── Domains
│ │ ├── Decoys
│ │ └── Bot Scanners
│ └── Property B (e.g., "Staging Environment")
│ ├── Domains
│ ├── Decoys
│ └── Bot Scanners
├── Integrations (organization-wide)
├── API Keys
└── Subscription/Billing

Your subscription and billing are tied to your organization:

  • One subscription per organization
  • Usage limits apply at the organization level
  • Invoices are generated per organization
  • Plan upgrades affect all properties within the organization

Most users need only one organization. Consider multiple organizations if:

ScenarioRecommendation
Single company, multiple websitesOne organization, multiple properties
Separate billing for different clientsMultiple organizations
Completely isolated environmentsMultiple organizations
Different teams with separate budgetsMultiple organizations

If you’re a first-time user, organization creation happens automatically during onboarding. Here’s what happens:

  1. You see the onboarding screen after first login
  2. Enter your organization name
    • Use something meaningful like your company name
    • Example: “Acme Corporation”
  3. Click “Create Organization”
  4. WebDecoy automatically:
    • Creates your organization
    • Creates a “Default Property” within it
    • Starts your 14-day trial
    • Adds you as the organization admin

To create another organization (for separate billing):

  1. Contact Support

After creation, you can modify your organization:

  1. Navigate to Settings in the sidebar
  2. Click Organization
  3. Update the organization name if needed
  4. Click Save

Once your organization is created, you’ll have full access to the WebDecoy dashboard.

The left sidebar provides access to all features:

┌─────────────────────────┐
│ [Logo] WebDecoy │
├─────────────────────────┤
│ Property: [Dropdown] │ ← Select active property
├─────────────────────────┤
│ 📊 Dashboard │ ← Overview and statistics
│ 🎯 Detections │ ← View threat detections
│ 🔗 Decoys │ ← Manage decoy links
│ 🤖 Bot Scanners │ ← Client-side detection
│ 🔌 Integrations │ ← Third-party connections
├─────────────────────────┤
│ ⚙️ Settings │
│ ├── Domains │ ← Custom domain setup
│ ├── Properties │ ← Manage properties
│ ├── Organization │ ← Org settings
│ ├── Billing │ ← Subscription & invoices
│ └── API Keys │ ← SDK authentication
├─────────────────────────┤
│ 👤 [Your Profile] │ ← User menu & logout
│ Current Plan: Trial │
└─────────────────────────┘

At the top of the sidebar, you’ll see a property dropdown:

  • Shows the currently active property
  • Click to switch between properties
  • All data displayed is filtered by the selected property

The main dashboard (/dashboard) shows:

SectionDescription
Detections ChartHourly detection counts by source type
Rule ExecutionsIntegration rule activity over time
Geographic MapDetection locations plotted on a map
MITRE Tactic SummaryDetection breakdown by ATT&CK tactic

From the dashboard, you can quickly:

  1. View recent detections - Click “Detections” in the sidebar
  2. Create a decoy - Click “Decoys” then “New Decoy”
  3. Set up a domain - Go to Settings → Domains
  4. Configure integrations - Click “Integrations”

Click your profile avatar (bottom-left) to access:

OptionDescription
ProfileView your account details
Current PlanShows your subscription tier
LogoutSign out of WebDecoy

After setting up your organization, follow these steps to get protected:

  • 1. Add a custom domain (Custom Domains guide)

    • Configure DNS records
    • Set up SSL certificate
  • 2. Create your first decoy (Decoy Links guide)

    • Create a honeypot link
    • Deploy it on your website
  • 3. Set up a bot scanner (Bot Scanners guide)

    • Create a scanner configuration
    • Install the JavaScript snippet
  • 4. Configure integrations (Integrations guide)

    • Connect Cloudflare for automatic blocking
    • Set up Slack for notifications
  • 5. Monitor detections (Detections guide)

    • Review incoming threats
    • Analyze threat scores

With proper setup, you can have WebDecoy protecting your site and receiving detections within:

Setup MethodTime
Bot Scanner only5-10 minutes
Decoy links15-30 minutes (including deployment)
Full custom domain1-24 hours (DNS propagation)

Your organization has usage limits based on your subscription plan:

ResourceTrialStarterProEnterprise
Properties1310Unlimited
Domains1525Unlimited
Decoys1050500Unlimited
Detections/month1,00010,000100,000Unlimited
API calls/month1,00010,000100,000Unlimited

View your current usage in Settings → Billing.


Your organization is ready. Now let’s explore core concepts:

Or jump straight to protection setup: