VIGIL Gate

Workflow-aware browser security for links opened from external applications, identity flows and navigation handoffs.

VIGIL Gate is a browser security extension that introduces a deliberate security checkpoint before potentially sensitive or unexpected web transitions. Modern phishing attacks do not rely only on obviously malicious URLs. Attackers increasingly exploit trusted workflows: an email, shared document, collaboration platform, search result, QR code, OAuth consent flow or familiar website can lead users toward an unexpected login page or external destination. Because the workflow appears legitimate, users may continue automatically and transfer trust from the original context to a destination that has not actually been verified. VIGIL Gate is designed to interrupt this workflow-conditioned trust transfer. When a navigation matches relevant risk conditions, VIGIL Gate displays an interstitial security gate before the destination is opened. The gate gives the user an opportunity to inspect the destination, reconsider the transition and explicitly decide whether to continue. The extension focuses on navigation context rather than attempting to classify every website as safe or malicious. Key capabilities include: • Detection of selected external and cross-context navigation transitions • Visibility into the actual destination domain before continuing • Security prompts for unexpected or potentially sensitive transitions • Detection of signals such as unfamiliar destinations, IP-address URLs, unusual domain structures and selected URL obfuscation patterns • Workflow-aware assessment of how the user reached a destination • Explicit user approval before a gated navigation proceeds • Replay-resistant and tab-specific approval handling • Local diagnostic tracing for testing and security analysis • Sanitisation of sensitive URL parameters in diagnostic information • Configurable behaviour for supported navigation scenarios VIGIL Gate is especially relevant for transitions involving: • Links opened from email or collaboration platforms • External login and authentication pages • OAuth and identity-related workflows • Links that leave a familiar or expected domain • Unexpected redirects • Lookalike or misleading destinations • Links using IP addresses instead of normal domain names • Long, encoded or otherwise difficult-to-review URLs Privacy and security principles VIGIL Gate is designed around data minimisation. The extension performs its navigation analysis locally in the browser. It does not require a remote reputation service, cloud-based URL inspection or user-account registration. VIGIL Gate is not designed to collect browsing histories, credentials, authentication tokens or the contents of web pages. Diagnostic information is stored locally and is intended to support troubleshooting, research and extension development. Sensitive URL parameters are masked where applicable to reduce the risk of exposing tokens or other confidential values in diagnostic traces. VIGIL Gate uses browser permissions only where they are required to observe supported navigation events, maintain navigation state and display the security gate. What VIGIL Gate does not do VIGIL Gate is not an antivirus product, content scanner, password manager, network firewall or replacement for endpoint protection. It does not guarantee that a destination is safe. A legitimate website may still be compromised, and a malicious website may use techniques that are not detected by the extension. The extension does not make final trust decisions on behalf of the user. Its purpose is to improve visibility and introduce friction at moments where users might otherwise continue automatically. VIGIL Gate should be used as an additional browser security control alongside established measures such as phishing-resistant multi-factor authentication, password managers, endpoint security, secure email gateways, browser isolation, DNS filtering and user awareness. Research background VIGIL Gate is part of the VIGIL research project, which examines the security gap between technical navigation controls and human trust decisions. The project explores concepts including: • Workflow-conditioned trust • User and workflow provenance • Context-aware browser security • Human factors in phishing resistance • Explicit trust transitions • Local-first security controls • Signal-based navigation assessment The objective is not to block the open web or overwhelm users with warnings. The objective is to place a focused security checkpoint at transitions where the user’s current workflow may create an unjustified sense of trust. VIGIL Gate is an experimental and research-oriented security extension. Feedback, testing results and responsible security reports are welcome.