PhishGate

Protect your company's employees from phishing attacks by blocking credential entry on untrusted domains.

PhishGate is a credential-protection layer for companies. Every time you land on a website that asks for a password, PhishGate checks the domain against your organisation's trusted-domain list — if it doesn't match, you get a clear warning before you type anything in. How it works • Your admin maintains a list of trusted domains in the PhishGate console. • When a password field (or other credential pattern) is detected on a page, the extension compares the domain to that list. • Known-good domains: no interruption. • Unknown domains: a warning banner appears so you can think twice. • Domains your admin has flagged as phishing: a full blocking overlay prevents credential entry entirely. • You can request access for a site or report it as phishing with one click. What makes it different • Zero ambiguity: a yellow shield appears only when the domain is NOT on your company's whitelist. No guessing, no false calm. • Works across frames and dynamically rendered login forms. • Per-company policy — each customer's trusted list is isolated. Privacy PhishGate only talks to api.phishgate.io. It sends: • the installation ID • the current domain and URL when you report, request access or dismiss • device metadata (browser, OS, extension version) on first login It does NOT read page contents, form values, or track your browsing. Password values never leave the page. Account You need a PhishGate access token to activate the extension. Get one at https://phishgate.io — accounts are free to create. Support: support@phishgate.io