SurfVigil

Real-Time Browser Threat Detection — Phishing, XSS, Cryptomining & Anomaly Protection

SurfVigil is a real-time browser security extension that protects you from four classes of web threats using machine learning: PHISHING – detects fake login pages mimicking trusted brands XSS – catches injected JavaScript attacks before they execute CRYPTOMINING – identifies pages secretly using your CPU to mine cryptocurrency ANOMALY – flags pages with unusual structural patterns that don't match normal browsing HOW IT WORKS Every time you load a page, SurfVigil extracts about 70 lightweight signals from the page (URL structure, DOM patterns, script behavior, network traffic shape) and sends them to a hosted ML backend that runs an ensemble of four trained models. The combined verdict appears as a colored badge on the toolbar: ✓ Green – Safe ! Orange – Warning ✕ Red – Blocked When a page is blocked, you see a clear warning page with the reason and an option to continue anyway if you trust the site. PRIVACY SurfVigil sends extracted feature signals (not raw page content) to its backend for analysis. URLs are logged for audit purposes. The extension does not read your form inputs, passwords, or cookies. See the privacy policy for full details. FEEDBACK LOOP If SurfVigil makes a mistake — flagging a safe site or missing a threat — click the toolbar icon and use "Report Safe" or "Report Threat." Your feedback feeds into periodic retraining. OPEN SOURCE This is a portfolio / educational project. The backend code is available publicly on Hugging Face Spaces.