Find threats
before they find you.
Email scanning, AI deepfake detection, malware analysis, and infrastructure auditing — no account required.
Email Security
Detect phishing, BEC, and domain spoofing before they reach your inbox
PhishGuard
AI-powered phishing email scanner. Paste an email or use the Chrome extension to detect spear-phishing, BEC, and credential-harvesting attacks in real time.
BEC Domain Detector
Find lookalike domains targeting your brand. Detects typosquatting, homoglyph attacks, and doppelganger domains used in Business Email Compromise.
Email Security Grader
Grade any domain's email security posture. Checks SPF, DKIM, DMARC, MTA-STS, and BIMI records with plain-English fix guidance.
AI Threat Detection
Unmask AI-generated content — deepfakes, synthetic voices, and AI imagery
AI Photo Detector
Upload any image and instantly find out if it was generated by AI tools like Midjourney, DALL-E, Stable Diffusion, or Firefly.
AI Video Detector
Detect if a video was made by Sora, Runway, Kling, or a deepfake tool — frame-level artifact analysis, temporal coherence checks, face-swap detection.
Audio Deepfake Detector
Upload any audio file and detect AI-generated or cloned voices. Powered by Whisper transcription and acoustic analysis.
Live Call Detector
Put your phone on speaker and monitor calls in real time. Detects AI-generated voices mid-call — no data stored or sent externally.
Malware & App Analysis
Deep static analysis for binaries, phishing kits, and mobile apps
App Scanner
Deep static analysis for Android APK, iOS IPA, and Windows EXE/DLL. Extracts bytecode, maps attack surfaces, checks against live threat intelligence feeds.
Phishing Kit Fingerprinter
Upload a ZIP phishing kit and identify the toolkit — Bluekit, Evilginx, GoPhish, and 20+ others. Extracts IOCs, exfiltration endpoints, C2 patterns.
Infrastructure & Network
Audit your web stack — headers, certificates, DNS, and endpoints
Security Monitor
Endpoint agent for Windows, macOS, and Linux. Scans running processes, open ports, and installed software for CVEs and misconfigurations.
Security Headers Analyzer
Audit any website's HTTP security headers. Checks CSP, HSTS, X-Frame-Options, COEP, COOP with severity grades and remediation steps.
SSL/TLS Certificate Checker
Audit SSL/TLS certificate health. Checks expiry, cipher suites, protocol versions, chain validity, and CT log presence.
Subdomain Takeover Scanner
Detect dangling DNS records vulnerable to subdomain takeover across AWS, Azure, GitHub Pages, Heroku, and more.
Access & Identity
Audit OAuth permissions, onboard contractors, and protect real identities
OAuth Risk Analyzer
Audit third-party OAuth app permissions in Microsoft 365 or Google Workspace. Flags over-privileged apps, shadow IT, and consent phishing risks.
WorkSecure
Per-platform SaaS identity segmentation. Each user gets a unique alias per app — containing phishing blast radius and enabling instant offboarding.
Protective Intelligence
Monitor threats against executives, locations, and brand assets in real time
Pentest & Red Team
Automated offensive testing for APIs and GraphQL endpoints
Awareness & Education
Human-readable security guidance designed for non-technical users
Common Sense Cyber
Not sure if something is a scam? Find your situation and get a plain-English answer — designed for non-technical staff and SMBs.
TapIn
Location-based social networking for real-world venues. Activate your location at a gym, library, or coffee shop — chats disappear when you leave.
Latest Updates
What's new across all tools
PhishGuard Extension v2 — Auto-scan & OAuth Consent Phishing Detector
May 2026
PhishGuard Scan Engine — URL enrichment disabled, government domains whitelisted
May 2026
Security Monitor Windows Agent — Unicode crash + silent exit fixes
May 2026
Subdomain Takeover Scanner — 60+ subdomains, 28 service fingerprints
May 2026