PhishProof

PhishProof is a web app (with optional Outlook/Gmail add-ons) that catches and contains phishing attempts aimed at small and mid-sized businesses that can’t afford a full SOC. It combines traditional rules (DMARC/SPF/DKIM checks, sender reputation, URL detonation) with an AI layer that flags lookalike domains, payment-redirection language, and “CEO fraud” patterns in real time. When a message is suspicious, it warns the recipient, auto-quarantines it, and opens a guided incident workflow: notify IT, search for similar emails across the org, and generate a simple executive-ready report. It also provides a lightweight “risk scoreboard” per department and recurring micro-training based on actual attacks seen in your tenant. The goal is not perfect detection—it’s reducing successful clicks and speeding up containment with minimal admin effort.