phishguards.com

What It Is

PhishGuard is an anti-phishing security platform focused on detecting, reporting, and helping take down phishing domains. Its website positions it for enterprise security teams, offering real-time threat feeds, URL/domain/hash scanning, phishing report submission, report status tracking, and API integration. Its positioning is closer to an “anti-phishing operations and threat intelligence workflow platform” than to traditional endpoint protection or a WAF.

Core Capabilities and Deployment

In terms of protection coverage, PhishGuard targets phishing-related threats such as credential theft, brand impersonation, malware distribution, and BEC. On the scanning side, it claims to use 70+ security engines and supports analysis of URLs, domains, MD5/SHA-1/SHA-256 hashes, and uploaded files. On the reporting side, domains can be submitted manually or automatically to 30+ security services, with status and success-rate tracking. Deployment is via a SaaS web platform plus REST API. Public endpoints can query domains, retrieve statistics and feeds, and submit public reports. Authenticated endpoints use X-API-Key and are billed by credits.

Pricing and Target Users

Pricing uses a free tier plus monthly subscription credits. Free includes 1 credit per month, limited to 1 report/day and 20 searches/day. Starter includes 15,000 credits at $5,000/month; Pro is $10,000/month; Enterprise is $15,000/month; and Business is $20,000/month. The terms state that credits are non-refundable and expire at the end of the billing cycle. The entry price is relatively high, making it better suited to companies with clear budgets for brand protection, SOC automation, and bulk phishing takedown workflows, rather than individual researchers.

Pros and Cons

The main advantages are its focused use case and clear API documentation, including examples for cURL, JavaScript, Python, and PHP. Feeds support json/txt/csv formats, making it easier to integrate into security workflows. It also offers automated tasks, real-time tracking, and two-factor authentication. The site also lists SOC 2 Compliant status and 99.9% uptime. Downsides include limited detail on the scope and audit specifics of its compliance certification, support being mainly shown via Telegram, and no visible commitments around SLA, data residency, payment methods, or enterprise support response times. The free quota is very limited, while paid plans are noticeably expensive.

Access from China and Alternatives

The crawled text does not provide information about access from mainland China, payment methods, or localization, so China accessibility is unknown. If access or payment from China is restricted, alternatives or complementary data sources/workflows to evaluate include Google Safe Browsing, Microsoft Defender SmartScreen/WDSI, Netcraft, PhishTank, VirusTotal, urlscan.io, and OpenPhish, though actual availability still needs to be tested.