Phishing Shield

Phishing Shield is an extension for Chrome and Microsoft Edge that analyzes every page the user visits and stops the phishing that email filters and traditional MFA cannot see: cloned login pages, adversary-in-the-middle kits that relay the real session, malicious QR codes and ClickFix attacks that ask the user to paste commands. This section serves whoever administers and deploys it and whoever uses it.

Product overview: Ironchip Phishing Shield.

How it fits together

The extension is deployed centrally with group policies, Intune or another device management system and managed from the Phishing Shield admin console: licenses, organization domains, blocked events and metrics. Once deployed, the user activates it once with their license and from then on it works in the background without interrupting browsing.

• No network changes. It uses no proxies and does not decrypt TLS: the analysis happens on the device itself.
• Chrome, Edge and Chromium browsers. A lightweight extension on the browser you already use.
• It sees what email filters miss. It analyzes the page in the browser, where the attack is, even if the address is not on any list.
• Blocking and logging. When it detects a threat, it blocks the page, warns the user and records the attempt for the organization.

What this section contains

Page	What it is for
How it works	What it checks on every page, which phishing techniques it detects and what the user sees
Detection engines	What each engine detects and when it blocks or only warns
Deploy in your organization	Force-install with group policies, Intune, Jamf or Google Workspace
Warnings and false positives	What the user does on a warning and how to handle a blocked legitimate page
Privacy and permissions	What data the extension reads and sends and what each permission is for

Where to start

How it worksWhat it checks on every page, which phishing techniques it detects and what users see when a threat is blocked.

Roll it out in your organizationInstall the extension silently on every device with group policies, Intune or your management system.

Detection enginesThe twelve engines and which attack each one detects.

SupportHow to contact Ironchip if you have questions about the installation or a problem with the extension.