One click in Gmail or Outlook web — or on any page that feels off — and what you're reading gets a plain-English verdict: who it pretends to be, what it's really after, and the evidence. No forwarding to IT, no account, no security degree.
Also for Edge, Brave and Firefox · Works without an account
A PhishTriage button sits in your Gmail or Outlook toolbar. Click it and the extension reads only what's already on your screen — subject, sender, reply-to, links, attachment names — and sends nothing anywhere until you ask.
Not an email? Any page you're unsure about can be scanned from the toolbar popup — the landing page a link took you to, a checkout that feels off, a login form you don't quite trust.
reads the page you see — never your mailbox
Verdicts arrive the way an analyst would say them: “Don't trust this”, “Be careful”, or “Looks safe” — with a line naming who the message impersonates and what it wants from you: your password, a payment, your 2FA code.
Behind the plain English sits the case file — nine independent checks scored separately, the signals that actually fired, and the indicators of compromise with an analyst's note on each. The checks run on the message itself — how it authenticates, who it claims to be, where its links actually go, and what any attachment really is.
Turn on Background protection and every site you land on is checked against live threat intelligence — by hostname only, by default. A flagged site gets a full-page warning before you type anything, with a way back to safety and the details one tap away.
It warns — it doesn't silently censor. You can always see why, and you can always proceed. Switch it off, or revoke the browser permission, and the traffic stops that instant.
Generate an invite code in the portal — that alone creates your organisation. Teammates redeem it and their devices join. One dashboard for everyone's scans and verdicts.
No sales call, no setup wizard. The first invite you generate creates the org; every redeemed code adds a seat to your dashboard.
Push the proxy address, monitoring defaults and an enrolment token by browser policy. Devices join the org on install — nothing typed, settings locked and labelled Managed.
Point the extension at a PhishTriage proxy you run yourself — triage traffic never leaves your infrastructure. HTTPS enforced, validated on both ends.
Individuals ride free — real analyses, no account needed. Teams and fleets get the dashboard, the rollout machinery and the reporting, under an annual agreement.
Free means free — no card, no trial clock. Enterprise agreements are annual and invoiced.