Company
Built to be checked.
Octopus Shield is developed by Çelebi Bilişim Ltd. The product exists because brand impersonation is usually visible in public data long before anyone acts on it.
Why Octopus Shield exists.
A convincing fake site is cheap to build and quick to publish. The signal that it exists is public — but scattered across certificate logs nobody reads by hand. The useful work is not access to the data; it is reading it continuously, explaining what was found, and keeping the finding reviewable afterwards.
Engineering principles.
- Measured or unstated.A number that has not been measured is not published, not even as an estimate.
- Observation is not judgement.What the system sees and what someone decides are kept structurally separate.
- No identity without need.The product does not collect visitor identity, so it cannot leak it.
- Deletion is not a fix.Legacy data is quarantined with its history intact rather than erased to make a report look cleaner.
- Zero runtime dependencies.The application ships without third-party runtime packages, which removes an entire class of supply-chain exposure.
Security philosophy.
Two endpoints that once accepted anonymous browser reports and turned them into login decisions were removed rather than patched, because the design itself was wrong: an anonymous claim must never become an enforcement outcome. Their replacement accepts anonymous observations only, stores them as unverified, and cannot produce a decision at all.