Menu

← Back to home⚡Starting at · $6.99 per user/month

Every feature.
One simple plan.

SpoofShield runs eight detection engines — including AI behavioural analysis, scam & phishing detection, and live SPF/DKIM/DMARC authentication checks — simultaneously inside Outlook, Gmail, and Yahoo Mail, surfacing every threat to your org-wide dashboard for a single per-seat price with nothing locked away.

Detection engines

Eight engines. One add-in.

Every engine runs simultaneously on every email you open—no configuration needed per user.

AI
Engine 1 · Flagship

AI Behavioral Analysis

Detects manipulation tactics, urgency pressure and writing-style anomalies. The engine analyses tone, linguistic patterns and contextual cues to flag emails that look clean on the surface but read like an attack.

  • Urgency and pressure language detection
  • Authority exploitation pattern recognition
  • Writing-style deviation from known senders
  • Trained on real BEC and phishing corpora
Urgency pressure“Process this wire urgently before end of business. Do not discuss with anyone.”
Authority exploit“This is the CFO. Update supplier bank details immediately.”
Style deviationMessage reads differently from previous emails from this sender.
TD
Engine 2

Typosquat Domain Detection

Catches look-alike domains before anyone clicks.

  • Homoglyph and Unicode lookalikes
  • Edit-distance scoring
  • TLD substitution checks
  • Subdomain injection detection
SpoofShield scans every sender domain against your trusted domain list using multiple similarity algorithms — Levenshtein distance, homoglyph substitution (paypaI.com), and TLD swaps (company.net vs company.com). If the domain looks like yours but isn’t, it’s flagged immediately.
VIP
Engine 3

VIP Impersonation Detection

Flags executive names sent from the wrong domain.

  • Configurable VIP name list
  • Display name and domain mismatch
  • Free-provider sender alerts
  • Fuzzy name matching
Business Email Compromise attacks most often use display names that match your CEO, CFO, or other executives — but sent from a free email provider or lookalike domain. SpoofShield cross-references the sender’s display name against your VIP list and raises an alert the moment a mismatch is detected.
RC
Engine 4

Reply-Chain Hijacking Detection

Detects new participants injected into trusted threads.

  • Conversation participant tracking
  • New-address injection alerts
  • Domain-shift detection
  • Recipient change visibility
One of the hardest attacks to spot: an attacker inserts a new email address into an ongoing trusted thread, making the reply look legitimate. SpoofShield tracks the participant set across the entire conversation and raises an alert any time a new address appears mid-thread.
DR
Engine 5

Sender Domain Reputation

Validates domains and compares senders with trusted contacts.

  • Trusted domain allowlist
  • First-contact alerts
  • Email address validation
  • MX mail-routing checks
Your admin defines which domains your organisation regularly communicates with. Any sender from outside that list that isn’t in your contacts triggers a ‘first contact from unknown domain’ alert — giving users an early nudge to verify identity before taking action.
RS
Engine 6

Risk Scoring Engine

Combines every active signal into one clear score.

  • Low, medium and high levels
  • Per-alert flag breakdown
  • Historical trend analysis
  • Exportable risk data
No single signal tells the whole story. SpoofShield’s risk engine combines all active detection results into a unified risk score and level — Low, Medium, or High — so users and admins can triage at a glance. Risk flags are stored with every alert event for audit purposes.
SP
Engine 7

Scam & Phishing Detection

Catches common fraud and phishing campaigns.

  • Government impersonation
  • Tech-support scams
  • Password-reset phishing
  • Fake billing and renewals
Beyond BEC and spoofing, attackers send mass-volume scam campaigns that exploit fear and urgency. SpoofShield’s scam engine identifies IRS/government impersonation from non-.gov senders, fake tech-support threats demanding remote access or gift cards, password-reset and account-verification lures, and fake billing or brand-impersonation emails — all flagged in real time before the user acts.
AU
Engine 8

SPF, DKIM & DMARC Authentication

Checks email authentication records live.

  • SPF verification
  • DKIM header results
  • DMARC policy checks
  • Clear status badges
A domain with no DMARC policy is trivially easy to spoof. SpoofShield checks all three email authentication standards in real time. In Outlook, results come directly from the email’s received headers — giving exact DKIM pass/fail, SPF result, and DMARC enforcement status. In the Gmail and Yahoo browser extension, SPF and DMARC are verified via a live Cloudflare DNS lookup. Results appear as coloured badge pills alongside other threat flags.

Admin & management

Built for IT admins, useful for everyone.

Configure once, deploy across your organisation and monitor activity from one dashboard.

01

Org-Wide Alert Dashboard

See alerts across the organisation and filter by risk, user, trigger or date.

02

Central Admin Configuration

Manage VIPs, trusted domains and detection settings for every user.

03

CSV Alert Export

Export alert history for compliance, security reviews or SIEM ingestion.

04

In-App Alerts

Clear visual warnings appear directly where users read email.

05

Audit-Ready History

Store timestamps, senders, triggers, scores and risk flags for review.

06

Role-Based Views

Users see their alerts while administrators can monitor the organisation.

Privacy & deployment

Zero-footprint. Privacy-focused.

No endpoint agent, VPN or complicated infrastructure for users.

P

Privacy-first analysis

Detection is designed to minimise transmitted content and retain only the metadata needed for alerts.

G

GDPR-friendly by design

Security metadata supports auditing without creating a second email archive.

Z

No user infrastructure

Install one add-in or browser extension—no endpoint agent or VPN required.

⚡

Deploy in minutes

Distribute through Microsoft 365 or browser extension management.

Ready to protect your team?

Start protecting Outlook, Gmail and Yahoo Mail with clear, explainable email risk warnings.

Get started → Talk to us

Simple per-user pricing · No setup fee · Cancel any time