redphish.app

What It Is

RedPhish is a browser-side automated detection and response tool positioned to block “in-browser” risks that traditional antivirus, EDR, email security, and DNS filtering often fail to cover. It scans pages, URLs, and page behavior in real time, blocking threats before users see fake login pages, scam payment pages, or malicious scripts. The product targets individuals, families, and businesses, with the small business edition emphasizing deployment without the need for a SOC.

Core Capabilities and Deployment

In terms of protection, RedPhish covers phishing sites, malicious URLs, typo-squatted and lookalike domains, fake Microsoft 365/banking/SaaS login pages, credit card skimmers, cryptomining, adult content, deceptive ads, and tracking scripts. It claims to use 9 threat intelligence sources, track more than 5.5 million malicious URLs, and update every 15 minutes. The enterprise edition also combines custom ML models with its own REST detection API.

Deployment is lightweight: it runs as a browser extension and supports Chrome, Firefox, and Microsoft Edge. Businesses can push it in bulk via Google Admin Console, Microsoft Intune, or MDM, with no proxy, custom browser, or endpoint agent required. For management, the enterprise edition provides a centralized dashboard, usage reports, block reports, organization-level policies, and a blocking page shown on dangerous websites.

Pricing and Compliance

The personal Starter Plan is listed at $10 per month, with a 7-day free trial, no credit card required, and cancellation at any time. Enterprise pricing is not public and requires booking a demo. The main materials do not disclose compliance certifications such as SOC 2, ISO 27001, or GDPR, so organizations in heavily regulated industries should conduct further due diligence. Payment methods are also not specified in the main text.

Pros and Cons

The main strength is its clear focus: protecting the last mile inside the browser, which can fill the gap left by email, DNS, and endpoint security tools that cannot see page content. Deployment is simple, making it suitable for small teams already using Google Admin, Intune, or MDM. Its privacy messaging is also relatively clear, stating that it does not collect or store browsing history and does not send company data to third-party scanners.

The limitations are that its protection boundary is primarily at the browser layer, so it cannot replace an email gateway, EDR/XDR, network-side security, or a full incident response system. Enterprise pricing, support tiers, compliance certifications, and threat intelligence sources are not disclosed in detail. The main materials also do not provide information on granular policy controls for complex enterprise environments or SIEM/SOAR integrations.

Who It’s For and Access from China

RedPhish is suitable for personal anti-phishing protection, family child-safe browsing, and small businesses without a dedicated security team that want to quickly reduce browser-based risk. Access from mainland China is not described in the main materials, and payment options and localization support are also unknown. If domestic availability and invoice/payment assurance are important, users should test it first through the trial. Comparable or alternative products include Guardio, Malwarebytes, Norton, Avast, Bitdefender, as well as common enterprise DNS filtering, email security, and EDR solutions.