Bolster AI

Executive Summary Over ten months with a large US insurance and employee benefits provider, adversary-in-the-middle (AiTM) phishing made up 34% of every takedown we performed, across close to 100 distinct phishing sites. None of the pages victims clicked asked for credentials. Harvesting happened one hop later, so the source page had ...

We started with six domains and a simple question: are these the same thing?

They didn’t look like it. Three were selling boots, three were selling sleepwear, and one rendered in German. One had prices two orders of magnitude too high. Two didn’t carry a brand name in the hostname at all.

Sixteen characters answered the question. A follow-up query then tur...

Every program gets the same question eventually. It arrives from a CFO, a board member, or a CISO three days out from a quarterly review, and it sounds deceptively simple: how do we know this is working?

The reflex answer is a number. We took down 5,000 malicious sites last quarter. It fills the slide, it trends up and to the right, and it survives roughly one follo...

Award announcements tend to blur together, especially during Black Hat week, when everyone in Las Vegas has something to celebrate. So let’s start with the part we actually spent time thinking about: the criteria.

This week, Cyber Defense Magazine named Bolster AI a finalist in two of its 2026 programs, the Top InfoSec Innovator Awards, now in their 14th year, and t...

What 90 days of takedown data reveals about scam campaigns that never touch your infrastructure.

Between January and April of 2026, Bolster AI submitted and enforced takedowns on roughly 3,000 malicious URLs impersonating a single global consumer software brand. The campaigns ran for the full quarter. They targeted paying subscribers rather than employees, ...