Spot the phish
before anyone clicks.
PhishCheck sits right inside Outlook. It follows every link in an e-mail to where it really leads, checks the destination against Google's threat lists and its traffic history, and shows your team a clear verdict in seconds.
- Windows, Mac & web
- iPhone & Android
- No user accounts
Destination
https://customs-fee-pay.top/login
The page has been reported as dangerous.
Destination
https://parcel-track-247.shop/
Rarely visited domain. Young domain.
Destination
https://newsletter.example.com/unsubscribe
PhishCheck is an aid, not a guarantee.
Illustration with made-up addresses.
The real destination
Short links, tracking links and redirect chains are followed to the very end.
Google's threat lists
Phishing, malware and unwanted software, checked against four Google Web Risk lists.
Traffic and age
Brand-new and rarely visited domains stand out, the way fresh phishing sites do.
An isolated browser
Links are opened on our server, never on your employees' computers.
How it works
Three steps between an e-mail and a safe decision.
-
01
Open an e-mail
Click PhishCheck in Outlook. It lists every link in the message, including image links and addresses written as plain text.
-
02
We follow each link
An isolated browser on our server opens the link and follows every redirect to the real destination. Your team's computers never touch it.
-
03
Get a clear verdict
Safe, Warning or Unsafe, with the reason in plain words and the real address, before anyone clicks.
Our checks found no danger: the destination isn't on Google's threat lists and is an established website with steady visitors.
Something is unusual: a young or rarely visited domain, a destination that couldn't be reached, or a check that didn't finish. Look twice.
Google lists the destination as phishing, malware or unwanted software. Don't open it.
Features
Made for busy inboxes.
Sees through redirects
A link that says one thing and leads somewhere else is the oldest trick in phishing. PhishCheck shows the address the link really ends up at, so the verdict is about the page your colleague would actually see.
Plain words, no scores
Every verdict comes with its reason, like “Young domain”.
Fast on repeat
Colleagues opening the same newsletter share one check, and results you've seen show up instantly.
Works where your team works
Outlook for Windows (new and classic), Outlook for Mac, Outlook on the web with Microsoft 365, and Outlook for iPhone and Android. Shared mailboxes too.
Rolled out in minutes
You get one add-in for your company. Your administrator deploys it to everyone in the Microsoft 365 admin center. No user accounts, no extra passwords.
English and German
PhishCheck speaks the language Outlook is set to, in light and dark mode.
- links sent to Google
- 0
- until full links are deleted
- 2 days
- Google threat lists checked
- 4
- in Outlook to check an e-mail
- 1 click
Privacy by design
Built for companies that take GDPR seriously.
PhishCheck checks links, not people. It is designed to send and keep as little as possible, and it comes with a data processing agreement (Art. 28 GDPR).
-
Only the link leaves Outlook
Never the text, subject, sender or recipients of the e-mail.
-
No employee is identifiable
Results belong to your company, not to a person. Nobody can see who checked what.
-
Google never sees your links
The threat lists are checked on our server. At most a short fingerprint fragment that thousands of addresses share is sent.
-
Deleted after 2 days
Full link addresses are removed automatically. Logs keep host names only.
-
Hosted in Germany
The links are stored and checked on servers in Nuremberg.
FAQ
Good questions.
Does PhishCheck replace our spam filter or antivirus? +
No. It adds a check right where people decide whether to click. Keep your spam filter, antivirus and training in place.
Is a link marked “Safe” guaranteed to be harmless? +
No. PhishCheck is an aid, not a guarantee. Brand-new phishing sites may not be listed yet, and some sites show a server different content than a person. “Safe” means our checks found no danger.
Are the links opened? +
Yes, on our server in an isolated browser, never on your employees' devices. Like other mail scanners, this can count as a click for a newsletter or use up a one-time link.
Which Outlook versions are supported? +
Outlook for Windows (new and classic), Outlook for Mac, Outlook on the web with Microsoft 365, and Outlook for iPhone and Android.
How do we roll it out? +
We create the add-in for your company. Your administrator deploys it to everyone in the Microsoft 365 admin center, or each person adds it in a few clicks.
What does it cost? +
It depends on the size of your company. Talk to us and we'll make you an offer.
See PhishCheck in your own inbox.
Book a short demo, and we'll show you PhishCheck with real e-mails and answer your questions.