Every founder hits this moment. You've just bought the domain you actually wanted, and the checkout page fills with suggestions: the .net, the .org, the plural, the hyphenated version, the .co, three misspellings, and a bundle labeled "protect your brand" for $79 a year. It feels irresponsible to click past it. So a lot of founders don't — and end up two years later paying renewals on eleven domains, nine of which point nowhere.
The advice on both sides of this is bad. One camp is fear-selling by people who earn money per registration, complete with vague warnings about "brand hijacking." The other camp — most famously a widely-cited 2012 argument that defensive registrations are a waste for small businesses — dismisses the whole category and offers nothing to replace it. Neither gives you a decision procedure.
I've spent 25+ years buying, selling, and writing about domains, and I've watched founders burn money in both directions: over-registering out of anxiety, and under-registering until a genuinely confusable name got taken by someone who wanted a payday. This guide is the middle path — a tiered framework for what to own, a budget by stage, the real five-year cost of a portfolio, and the question that tells you whether a given domain is an asset or an expense.
What is defensive domain registration, and does it still work in 2026?
Defensive registration means buying variants of your own brand — other extensions, plurals, misspellings, hyphenated forms — not to use them, but to keep someone else from using them. The theory is straightforward: if you don't own yourbrand.net, a competitor or opportunist might, and they'll intercept traffic meant for you or extract a payment to hand it over.
The theory isn't wrong. It's just wildly incomplete about scale.
At the end of Q1 2026 there were 392.5 million registered domain names across all extensions, up 24.1 million year over year, according to Verisign's Domain Name Industry Brief. Hundreds of top-level extensions are generally available. For any brand name, the set of plausible variants — extensions × plurals × misspellings × prefixes × suffixes × hyphens — runs into the hundreds or thousands.
You cannot buy coverage. The math forecloses it. So "register defensively" as a general instruction is meaningless; the only useful version is "register the specific handful where a real person would plausibly end up, and handle the rest a different way."
The part the fear-sellers leave out: you have rights you didn't buy
Defensive registration is not your only protection, and treating it that way is what leads to bloated portfolios. If someone registers a confusable version of your trademarked brand in bad faith, there is a dispute process designed for exactly that. WIPO's Arbitration and Mediation Center administered more than 6,200 domain name dispute proceedings in 2025 — a record year since the policy's creation over 25 years ago, per WIPO's published dispute statistics.
That number cuts both ways. It confirms that bad-faith registration against real brands is common and rising. It also confirms that the remedy is routine, well-trodden, and available to you — and it is powered by your trademark, not by your registration receipts. This is the strongest practical argument for spending your protection budget on clearing and registering a trademark before you build the brand rather than on a wall of unused domains. A trademark protects you against variants that don't exist yet. A registration only protects you against the exact string you bought.
The four-tier framework: what to actually own
Instead of a yes/no on "should I buy variants," sort every candidate domain into one of four tiers. This is the framework I use, and it collapses a fuzzy anxiety into about fifteen minutes of decisions.
| Tier | What it covers | Action | Typical count |
|---|---|---|---|
| Tier 0 — Own it | Your primary domain. The one on your business cards, in your email address, in every ad. | Buy the best one you can afford, before launch. | 1 |
| Tier 1 — Own if cheap | The one or two variants a real customer would actually mistype or assume: the .com if you launched on something else, an obvious plural/singular, the extension your market defaults to. |
Buy when the annual cost is trivial relative to your traffic. Redirect properly. | 1–3 |
| Tier 2 — Monitor, don't buy | Remaining extensions, less-likely misspellings, hyphenated forms, get/try/use prefixes. |
Set an alert. Buy only if someone registers it and actually uses it against you. | 0 |
| Tier 3 — Never | Exotic extensions, keyword-stuffed variants, country codes for markets you don't sell in, "bundle" upsells. | Skip. This is where portfolios go to die. | 0 |
The decisive question for Tier 1 versus Tier 2 isn't "could someone theoretically take this?" It's "if a real customer typed this, would they be trying to reach me, and would they give up when they didn't?" A misspelling nobody makes protects nothing. The .com when you're on a .io and your customers are non-technical protects quite a lot — which is exactly the traffic-leakage problem we cover in the seven warning signs it's time to rebrand.
Tier 1 depends entirely on how much traffic you have
This is the part generic guides get wrong by giving everyone the same "buy 3–5 extensions" answer. Defensive value scales with the traffic you'd lose, and a pre-launch startup has none. Nobody is mistyping a brand they've never heard of.
- Pre-launch / pre-revenue: Tier 0 only. One domain. Every dollar you spend on
.netvariants of a name you might abandon in a pivot is a dollar not spent on a better primary name. - Early traction (real users, some brand searches): Tier 0 plus the single most confusable variant. Usually the
.comif you're not on it, or the singular/plural flip. - Funded, with meaningful direct traffic: Tier 0 plus 2–4 Tier 1 names, plus a trademark filing. Now there's traffic worth intercepting and a brand worth squatting.
The honest cost math nobody publishes
Defensive registration advice almost never shows the recurring number, because the recurring number is what kills the idea. Registrations renew annually, forever, and extension pricing varies enormously — some run a few dollars, others carry premium registry pricing many times higher.
Here's a realistic five-year picture for three approaches, using conservative mid-range renewal assumptions:
| Approach | Domains held | Est. annual renewals | 5-year cost | Resale value at the end |
|---|---|---|---|---|
| Minimalist | 1 primary | ~$15 | ~$75 | Full — a good name holds value |
| Framework (Tier 0 + 1) | 3 total | ~$50 | ~$250 | Primary holds value; variants ~$0 |
| Checkout-upsell pile | 11 total | ~$250+ | ~$1,250+ | Near zero across the board |
The number that should stop you isn't the five-year total. It's the last column.
Investor's note: In 25 years of watching domains change hands, the single most consistent thing I see is founders describing their defensive portfolio as an "investment." It isn't.
yourbrand.netis worth something to exactly one buyer on earth — you — which means it has no market and therefore no price. A brandable one- or two-word name is worth something to hundreds of potential buyers, which is why it holds value. If you want domains that behave like assets, buy names a stranger would want. If you want protection, buy the two variants that plug real leaks and stop there.
Put differently: an unused variant of your own name is a subscription, not an asset. Budget it as overhead and the decision gets much easier.
Where the money is better spent: one strong name beats five weak ones
Here's the trade almost nobody frames explicitly. The same budget that buys eight defensive registrations for five years buys one genuinely good primary domain outright — and the primary is the thing that actually affects whether people remember you, spell you correctly on a phone call, and trust you enough to enter a credit card.
A short, clean, brandable name reduces the misspelling problem at the source. There's far less to defend when the name is unambiguous to begin with. That's the compounding advantage: good naming lowers your defensive surface area permanently, while defensive registration only patches a leak that better naming would have prevented.
The qualities that matter in a primary name are boring and consistent: short enough to say out loud without spelling it, no ambiguous letter clusters, no hyphen, no number, and an extension your specific audience already trusts (our TLD trust rankings break down how each one actually reads to users). Names like these are what a curated marketplace exists to surface — every listing below is live inventory, AI quality-vetted and owner-verified, priced at $199 or less:
If your defensive instinct is really a worry that your current name is confusable, that's not a registration problem — that's a signal to fix the name while it's still cheap to fix. Our guide to getting a genuinely premium domain for under $500 walks through what that upgrade actually costs.
Subdomain, subfolder, or a new domain for your second product?
This is the other half of portfolio thinking, and it's a strategy question, not a protection question. When you launch a second product, you have three architectures:
Subfolder — yourbrand.com/product
The default, and the right answer most of the time. Everything you publish accrues to one property. Links earned anywhere on the site strengthen everything else. One certificate, one analytics setup, one thing to renew. For a startup with finite attention, consolidation is almost always the winning move.
Subdomain — product.yourbrand.com
Reasonable when the second product is genuinely a separate application — different stack, different login, different infrastructure — or serves a clearly different audience. Search engines handle subdomains fine; the real cost is organizational, since authority and attention are split across two properties you now have to grow separately.
Separate domain — productname.com
Justified when the second product is a distinct brand you intend to fund, market, and grow independently — something you could plausibly spin out or sell. You are starting a new property from zero visibility, so this should be a branding decision, never an SEO one.
| Subfolder | Subdomain | Separate domain | |
|---|---|---|---|
| Authority | Compounds into one property | Split across two | Starts from zero |
| Setup + upkeep | Lowest | Moderate | Highest |
| Brand separation | None | Partial | Complete |
| Best for | Features, content, most second products | Distinct apps, separate infrastructure | A real second brand, or something you may sell |
Choose a separate domain when the brand genuinely needs to stand alone — and when you do, buy a name that would be worth something to someone else, so the decision stays reversible. That's the difference between a second brand and a second expense.
Redirect hygiene: the step that makes defensive domains actually work
Here's the failure mode I see most often. A founder buys the variants, feels protected, and then... parks them. They resolve to a registrar placeholder page, or a "coming soon" screen, or nothing at all. That's the worst outcome: you're paying to hold a domain that captures a visitor and then drops them.
If you own it, point it somewhere useful, correctly:
- Use a permanent server-side redirect. Google is explicit: "we recommend that you use a permanent server-side redirect whenever possible," and treats a
301or308as a signal that the redirect target should be canonical. - Redirect to the final destination directly. Chained redirects add latency and dilute the signal — send
yourbrand.net/pricingstraight toyourbrand.com/pricing, not through two hops. - Map page-to-page, not everything-to-homepage. If a variant ever hosted real content, preserve the paths. Dumping every URL onto the homepage throws away the value you're trying to capture.
- Keep redirects up for at least a year. Google's site-move guidance says to keep redirects "for as long as possible, generally at least 1 year," and to consider keeping them indefinitely for users.
- Include your redirect domains in your email setup. A domain that sends nothing should publish a null SPF and a
p=rejectDMARC policy so nobody can spoof mail from it — the same reasoning behind our domain email deliverability guide. - Renew everything on auto-renew, in one account. The classic disaster is a defensive domain quietly expiring and getting picked up by exactly the party you bought it to block.
Steps 1 through 4 are also the mechanics of a domain migration, which is worth understanding before you need it — our buying domains for SEO guide covers redirect strategy and inherited-history checks in more depth.
When a portfolio genuinely makes sense
None of this means "own one domain forever." There are three cases where holding more is straightforwardly correct:
- You're building more than one thing. Multiple products with independent brands need independent names. That's a portfolio of assets, not a defensive pile.
- You bought an asset, not a shield. A short, clean name you acquired below market because it was well-priced is a legitimate holding whether or not you launch on it. Understanding how domains are actually valued is what separates this from hoarding.
- You have a documented, specific risk. A competitor already registering near-miss versions of your name, an active dispute, or a market where a particular country extension is a genuine trust requirement.
What all three have in common: a specific reason attached to a specific name. The moment you can't articulate why you own a particular domain, it's overhead — and the honest move is to let it go or, if it's actually good, list it and let someone else put it to work rather than paying renewals on it indefinitely.
The bottom line
Portfolio thinking isn't about how many domains you own. It's about whether each one has a job.
Buy one primary name good enough that it doesn't need much defending — short, spellable, unambiguous, on an extension your audience trusts. Add the one or two variants a real customer would plausibly hit, and redirect them properly instead of parking them. Skip the rest, file a trademark instead, and let dispute policy handle bad-faith registration, because you cannot outbuy a 392-million-domain namespace. For a second product, default to a subfolder and only split into a new domain when you're genuinely building a second brand.
The best defensive spend a founder can make is a primary domain nobody mistypes in the first place. Browse curated brandable names or premium one-word domains — every one $199 or less, owner-verified, with the price visible up front and no negotiation. If you're still deciding what kind of name to build on, start with our companion guides to brandable domains and keyword domains, or the case for two-word names as the affordable sweet spot.
