Verifeye

Phishing detection for Gmail. Header auth, brand impersonation, link reputation, AI reasoning. Local-first, explainable verdicts.

Verifeye is a security extension that catches phishing emails in Gmail before you click. It runs entirely in your browser — no inbox uploads, no server, no ads — and it tells you WHY a message is suspicious, not just that it is. WHY VERIFEYE EXISTS Modern phishing emails clear DKIM, pass DMARC, and look pixel-perfect. They land in your primary inbox, not your spam folder. That's where the damage happens. Verifeye is built specifically for those. DETECTION LAYERS - Real header authentication — SPF, DKIM, and DMARC verdicts read directly from the email's authentication headers. - Sender history — Verifeye remembers every sender you've interacted with. New senders, sticky-flagged senders, and display-name swaps are all caught. - Brand impersonation — a curated registry of 340+ commonly impersonated brands (banks, payroll, government, e-commerce, crypto exchanges). Damerau-Levenshtein typo detection catches "g00gle", "amaz0n", "co1nbase". - Behavioral patterns — unsolicited business offers, urgency baiting, OTP/gift-card requests, fake invoices, credential-harvest framing. In ELEVEN languages: English, Spanish, Portuguese, French, German, Italian, Hindi, Mandarin (Simplified + Traditional), Tagalog, Arabic. - Link-text vs URL mismatch — the classic phish where anchor text says "amazon.com" but the URL points somewhere else. - Live URL reputation (opt-in) — Google Safe Browsing checks every link in every analyzed email. You bring your own API key. - AI Reasoner (opt-in) — when rules are inconclusive, an LLM gives a final read on the message. You bring your own OpenAI or Anthropic API key. WHAT YOU SEE IN GMAIL A clean banner appears at the top of every email you open: SAFE, WARNING, or DANGEROUS — with the exact reasons. One click to dismiss or trust the sender. PRIVACY - Detection runs locally on your device by default. - No telemetry. No analytics. No phone home. - The optional Gmail API and AI Reasoner features are clearly labeled as opt-in, send data directly from your browser to Google / OpenAI / Anthropic, and never route through any Verifeye server (we don't have one). - Your email body, headers, and API keys never leave your machine unless YOU explicitly enable a cloud feature. DASHBOARD Every detection lands on a built-in dashboard with charts, threat list, and the full reasoning chain per verdict. Open it from the toolbar popup → "Open dashboard". BULK INBOX SCAN One click scans up to 50 recent inbox emails at once with live progress, a cancel button, and yield-to-main-thread so Gmail stays responsive. SUPPORTED EMAIL PROVIDERS Gmail (web). Outlook web is in development for v2.1. PRICING Free during the research preview. Paid tiers (team features, priority support, full Outlook integration) are planned for v3. PRIVACY POLICY https://verifeye-website.vercel.app/legal/privacy.md