Sign in to PhishAnalyze
Use your workspace account to scan emails, review private history, and connect your own mailbox.
Use your workspace account to scan emails, review private history, and connect your own mailbox.
Workspace
Upload an .eml file to analyze phishing indicators, malicious URLs, sender signals, and attachments.
Use this as a quick checklist the first time you try PhishAnalyze.
Open this when you need more scans, mailbox monitoring, or external reputation checks.
Upload one suspicious .eml file. The result is saved only to this workspace.
Use the guide below so headers, links, and sender details stay intact.
Keep the original email untouched until you finish reviewing the verdict and evidence.
The report explains completed, skipped, locked, cached, and unavailable checks in plain language.
Choose your mail app, save the message, then upload that file here.
Choose a file to start a fresh analysis.
Track scan-linked response state, owner, evidence history, and escalation.
Only results from this signed-in workspace are shown.
Connect mailboxes owned by this workspace. Credentials are encrypted and never returned to the browser.
Start with manual .eml upload if you are unsure. Mailbox monitoring needs an app-specific password, not your normal mailbox password. Open the provider setup guide.
Loading mailbox state.
Manage this PhishAnalyze workspace, billing, mailbox access, and data controls from one place.
Workspace access is private to signed-in users. Scan history, connected mailboxes, and billing are scoped to this workspace.
Free scans stay useful with local checks. Paid plans unlock link reputation, domain intelligence, mailbox monitoring, and deeper analysis without asking users to paste API keys.
Plan cadence appears after subscription checkout.
Connect an inbox when monitoring is available on your plan. Mailbox credentials are encrypted and never returned to the browser.
Uploaded email results stay in workspace history until you delete them. Reports escape email content before rendering and do not expose mailbox passwords.
Passkey policy is loading.
Owner and admin users can manage access. Analysts can scan and review results. Viewers can review history without changing settings.
Public users do not paste API keys. Reputation, LLM, sandbox, and browser-backed checks unlock by plan and run through server-side keys with quota controls.