🆕 AI + SPF/DKIM/DMARC — no other extension does both

Stop Phishing Emails Before They Stop You

PhishGuard scans every Gmail message using AI, real email authentication, IP reputation, and 750,000+ threat URLs — all in seconds.

Add to Chrome — It's Free See how it works →

✓ Free tier available  ·  No credit card required  ·  Gmail only

🔗 752,779 threat URLs
🌐 41,767 malicious IPs
🤖 AI analysis on every scan
🔐 SPF / DKIM / DMARC verified
< 5s per scan

6-Layer Protection on Every Email

PhishGuard doesn't rely on a single signal. It runs six detection layers in parallel so nothing slips through.

1

Quick Risk Check

Instantly classifies emails from 30 known-safe domains client-side — no network request, no quota cost.

~0ms · Client-side
2

Email Authentication

Standard mode scrapes mailed-by/signed-by from Gmail's UI. Enhanced mode (Pro) uses the Gmail API to verify real SPF, DKIM, and DMARC records.

~0.3s · DOM + API
3

Rule Engine

Pattern matching for brand impersonation, bulk-mailer spoofing, reply-to mismatches, dangerous attachments, QR codes, and URL obfuscation.

Instant · 19 brands
4

URL Threat Scan

Every link checked against 752K locally-cached threat URLs, Google Safe Browsing hash prefixes, and URLhaus live feed.

~1s · 3 sources
5

IP Reputation

Sender IP resolved and checked against 41K locally-cached malicious IPs and AbuseIPDB's live API.

~1s · 2 sources
6

AI Analysis (LLM)

Email body, sender context, links, and attachments analyzed by a large language model trained to spot social engineering and phishing language.

~3s · LLM

Built for Security, Not Scare Tactics

Every feature exists to catch real threats — not to pressure you into upgrading.

🔐

Real Email Authentication

The only extension that verifies actual SPF, DKIM, and DMARC records via the Gmail API. Catches spoofed senders that look perfectly legitimate.

🤖

AI Body Analysis

LLaMA 4 reads the email like a security analyst — flagging social engineering, fake urgency, credential harvesting attempts, and impersonation language.

🕵️

Bulk Mailer Detection

Emails sent via Brevo, SendGrid, or Mailgun that impersonate known brands are caught — even when SPF/DKIM passes for the mailer's own domain.

🌍

IP Reputation

Sender IPs checked against 41K known-malicious addresses. Cross-referenced with AbuseIPDB for up-to-date threat intelligence.

Instant for Trusted Senders

Emails from Google, LinkedIn, GitHub, PayPal, and 27 other safe domains are classified instantly with no API calls and no quota usage.

🔒

Privacy by Design

No data stored server-side. Email content is processed transiently and discarded. No tracking, no ads, no selling your data. Ever.

Simple, Transparent Pricing

Start free. Upgrade when you need unlimited scans and the strongest protection available.

Free
$0
forever

  • 5 scans per day
  • Instant check for 30 trusted domains
  • URL threat database (752K URLs)
  • IP reputation check
  • Rule engine + brand detection
  • Standard email auth (DOM scraping)
  • 24-hour scan cache
  • Enhanced Protection (Gmail API)
  • Unlimited scans
  • Detailed scan breakdown
Add to Chrome — Free

20% cheaper than Guardio — with stronger detection and no hidden fees.

The Only Extension That Does It All

Competitors rely on URL blacklists alone. PhishGuard adds AI, email authentication, and IP reputation.

Feature Netcraft Guardio PhishGuard
URL Threat Database 752K URLs
AI Body Analysis AI Analysis
SPF / DKIM / DMARC Gmail API + DOM
IP Reputation 41K IPs
Brand Impersonation Detection 19 brands
Bulk Mailer Spoofing Detection
Free tier (no credit card) 7-day trial only Free forever
Price Free $9.99/mo Free / $7.99/mo

Your Emails Stay Yours

PhishGuard is built on a simple principle: analyze to protect, never to store or profit.

🚫

No Server-Side Storage

Email content is processed in memory and discarded immediately after scanning. Nothing is written to disk.

👁️

Gmail API — Read-Only, Headers Only

Enhanced Protection reads only email authentication headers (SPF/DKIM/DMARC). It does not read, store, or forward email bodies.

📵

No Tracking, No Ads

No analytics scripts. No ad networks. No third-party cookies. The extension has no interest in who you are.

📦

Local-First Where Possible

Threat databases are cached locally. Most scans never leave your browser — only unknown domains trigger a backend call.

Read the full Privacy Policy →

Start Protecting Your Inbox Today

Free to install. No credit card. No scary permissions on day one.

🛡️ Add PhishGuard to Chrome