ByteMantle Browser Security & Protection
Detect. Investigate. Respond. Secure your browser.
Start new thread

ByteMantle Browser Security & Protection - Detect. Investigate. Respond. Secure your browser.

by•
ByteMantle is a Browser Detection & Response (BDR) platform that detects and investigates ClickFix, FileFix, OAuth, phishing, identity attacks, malicious scripts, service workers and Web3 threats. The project goes beyond URL blocking with behavioral analysis, attack-chain visualization, threat intelligence and incident correlation. Built for individuals, businesses, enterprises and MSSPs, with centralized management, SNOW and SIEM integrations and privacy-first local detection.

Add a comment

Replies

Best
Maker
📌

Hi Product Hunt! 👋

I'm the person behind ByteMantle, and I'd like to share how this whole project actually started.

ByteMantle started with two security problems that caught my attention: Device Code phishing and ClickFix attacks.

I had attended a presentation about Device Code phishing, and it got me thinking about how easily users can be tricked through their browsers. Around the same time, I kept hearing about large organizations struggling with ClickFix attacks, where users are manipulated into following fake instructions and executing malicious commands on their own machines.

I started asking myself a simple question: could I build a browser extension that could help protect users against both?

That was the beginning of ByteMantle.

My background is in IT infrastructure and cybersecurity, with many years of experience in endpoint security and malware investigation. I'm not a professional software developer, but I decided to take on the challenge.

With the help of ChatGPT and Claude, I started building a Chrome extension. What began as an experiment gradually turned into something much bigger.

For almost three months, I worked on the extension, adding detection capabilities, researching new attack techniques, testing real-world scenarios and continuously improving it.

Then I realized something: protecting the browser was only the beginning.

Detecting threats is important, but security teams also need visibility into what happened, how an attack started, what infrastructure was involved, which devices were affected and how different events are connected.

That's when the original extension started evolving into a full Browser Detection & Response platform.

Today, ByteMantle consists of several major components:

1. Browser Protection

A Chrome and Microsoft Edge extension with approximately 300 digitally signed detection rules covering modern browser-based threats, including:

  • ClickFix and FileFix attacks.

  • Phishing and identity attacks, including Device Code phishing.

  • Malicious scripts, redirects and suspicious browser behavior.

  • Service Worker abuse and persistence.

  • Web3 threats, malicious smart contracts and suspicious RPC interactions.

  • Clipboard-based attacks and other techniques targeting users directly through the browser.

2. Customer Management Console

Each customer gets an isolated tenant with a dedicated security workspace.

I wanted to go beyond a simple event viewer, so I built different areas covering the entire security workflow:

  • Monitor: Overview, incidents and threat events.

  • Investigate: Threat hunting, intelligence, campaigns, attack infrastructure, commands, artifacts, resource lineage, service workers and Web3/RPC investigations.

  • Exposure: Technology discovery, vulnerability exposure and SaaS inventory.

  • Reports: Threat reports, dashboards, queries and scheduled reporting.

  • Protection: Policies, detection rules, threat indicators, warning pages and groups.

  • Fleet: Device management, enrollment and connection health.

  • Administration: Users, API keys, SIEM integrations, audit logs and settings.

3. Provider Console

I also built a separate provider management console to manage customer tenants, platform-wide intelligence, policies and the overall service.

The architecture was designed to support multi-tenancy and MSP use cases.

4. The Platform Around It

Beyond the extension and consoles, I also built the public website, subscription structure, integrations and the supporting infrastructure needed to turn the original idea into an actual product.

And that's where I am today.

What started as an idea for a browser extension against Device Code phishing and ClickFix gradually evolved into an entire security platform.

I've built it independently, step by step, using AI tools, a lot of experimentation, research and persistence.

I'm not backed by a development team or a big company. I've been learning, building, testing, breaking things, fixing them and constantly expanding what I initially thought was possible.

There is still plenty of work ahead, and I'm fully aware that launching a platform is only the beginning.

But I'm genuinely proud of how far this project has come.

Why did I build ByteMantle?

Because I believe the browser deserves the same security attention we already give to endpoints, networks and email.

I'd genuinely love to hear your thoughts, especially from security engineers, SOC analysts, threat researchers, enterprise security architects and fellow indie makers.

What would you expect from a proper Browser Detection & Response platform?

Thanks for taking the time to check out ByteMantle! 🚀

Website: