# Phishing Shield

> In-browser protection with detection engines for cloned pages, adversary-in-the-middle, ClickFix, QR, session hijacking and MFA bypass.

URL: https://docs.ironchip.com/en/phishing-shield/

Phishing Shield is an extension for Chrome and Microsoft Edge that analyzes every page the user visits and stops the phishing that email filters and traditional MFA cannot see: cloned login pages, adversary-in-the-middle kits that relay the real session, malicious QR codes and ClickFix attacks that ask the user to paste commands. This section serves whoever **administers and deploys** it and whoever **uses** it.

Product overview: [Ironchip Phishing Shield](https://www.ironchip.com/en/phishing-shield).

## How it fits together

The extension is deployed centrally with group policies, Intune or another device management system and managed from the Phishing Shield admin console: licenses, organization domains, blocked events and metrics. Once deployed, the user activates it once with their license and from then on it works in the background without interrupting browsing.

- **No network changes.** It uses no proxies and does not decrypt TLS: the analysis happens on the device itself.
- **Chrome, Edge and Chromium browsers.** A lightweight extension on the browser you already use.
- **It sees what email filters miss.** It analyzes the page in the browser, where the attack is, even if the address is not on any list.
- **Blocking and logging.** When it detects a threat, it blocks the page, warns the user and records the attempt for the organization.

## What this section contains

| Page                                                                           | What it is for                                                                            |
| ------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------- |
| [How it works](https://docs.ironchip.com/en/phishing-shield/como-funciona/)                             | What it checks on every page, which phishing techniques it detects and what the user sees |
| [Detection engines](https://docs.ironchip.com/en/phishing-shield/motores-de-deteccion/)                 | What each engine detects and when it blocks or only warns                                 |
| [Deploy in your organization](https://docs.ironchip.com/en/phishing-shield/despliegue/)                 | Force-install with group policies, Intune, Jamf or Google Workspace                       |
| [Warnings and false positives](https://docs.ironchip.com/en/phishing-shield/avisos-y-falsos-positivos/) | What the user does on a warning and how to handle a blocked legitimate page               |
| [Privacy and permissions](https://docs.ironchip.com/en/phishing-shield/privacidad-y-permisos/)          | What data the extension reads and sends and what each permission is for                   |

## Where to start