Get started
Phishgate is a browser extension that warns employees before they enter credentials on an unapproved domain. Central whitelist, transparent logs, no cloud lock-in.
What is Phishgate?
Instead of filtering mail or hardening endpoints, Phishgate intervenes at the moment phishing actually works: when a person types a password.
The extension is activated with a company token. Configurations, whitelists and events stay neatly separated per tenant.
Before any password entry, the extension checks the domain against your company whitelist and the global Phishgate whitelist (Microsoft, Google & co.).
If the domain is unknown, a warning fades in over the login field — a deliberate stop before credentials are lost.
Protection modes
Phishgate is not a 100 % protection promise — but it creates a clear moment of friction. You decide how forceful.
Employees see the warning but can deliberately skip it. Ideal for pilots and teams that regularly evaluate new tools.
Phishgate prevents the entry and makes the page unusable in the critical moment. Recommended for regulated teams and production rollouts.
Bypassing remains technically possible — Phishgate intentionally relies on the moment of friction, not on prohibition. That very friction is what changes behavior.
Whitelist concept
You only maintain the domains that truly belong to your company. Our curated global whitelist takes care of the rest.
Your own login domains, SSO endpoints and tools — managed centrally in the dashboard, instantly distributed to all extensions.
Microsoft 365, Google Workspace, Slack, GitHub and hundreds of other well-known services — curated and continuously updated.
Every warning ends up in the dashboard — including domain, time and mode. Perfect for reports, audits and awareness conversations.
3-step onboarding
Register your company for free and receive an access token in the dashboard.
Employees install the extension in Chrome, Edge or Firefox — manually or via GPO/MDM rollout.
Add your own login domains, choose LOW or FULL mode — done.
Get going
Start free, upgrade anytime. No credit card, no cloud requirement, no vendor lock-in.