One click in Gmail or Outlook on the web — or on any page that feels off — and what you're reading gets a plain-English verdict: who it pretends to be, what it's really after, and the evidence. No forwarding to IT, no account, no security degree.
Also for Edge, Brave and Firefox · Works without an account
In Gmail, or in Outlook on the web at outlook.live.com, outlook.office.com or outlook.office365.com, open the email, click the PhishTriage icon in your browser’s toolbar, then Analyze Current Email. You may also see a PhishTriage button among the email’s own buttons. No email is read until you click one of the two; then the extension reads the email you have open — sender, recipient, subject, the text, its links and attachment names — and sends it for a verdict.
Not an email? Any page you're unsure about can be scanned from the toolbar popup — the landing page a link took you to, a checkout that feels off, a login form you don't quite trust. Other webmail, including Outlook at outlook.cloud.microsoft, is checked this way too, as a web page.
sends a page or email only when you ask
Verdicts arrive the way an analyst would say them: “Don’t trust this”, “Be careful”, or “Looks safe” — with a line naming who the message impersonates and what it wants from you: your password, a payment, your 2FA code.
Behind the plain English sits the case file — an overall risk score and up to eight more, each scored separately, the signals that scored highest, and the indicators found, each with a short note. The checks run on the message itself — who it claims to be, the address it came from, where its links point, and what its attachment names give away.
Turn on Background protection and every site you land on is checked against PhishTriage’s list of known dangerous sites — by hostname only, by default. A flagged site gets a full-page warning within seconds of opening, with a way back to safety and the details one tap away. How to turn it on →
It warns — it doesn't silently censor. You can always open the details, and you can always proceed. Switch it off and the traffic stops that instant.
Create a team in the portal and invite colleagues with a link. Once they join and log in from the extension, everyone's scans and verdicts land on one dashboard — reported in aggregate unless you choose otherwise. Step by step →
No sales call, no setup wizard. Sign in with Google, press Create a team, and invite people from People — each invitation is a link you send yourself.
Install on every managed browser by policy, with monitoring defaults set and settings locked and labelled Managed. We set it up with you.
Need triage traffic to go to a backend you run? A self-hosted backend is available with Enterprise, on request.
People ride free — real analyses, no account needed. Organisations get managed rollout, verified company domains and, on request, their own backend, under an annual agreement.
Free means free — no card, no trial clock. Enterprise agreements are annual and invoiced.