Syba Cybersecurity Agent

SYBA Shield is the cyber-concierge that lives in your browser toolbar. Toggle it on with one click and every page you visit gets a security check — no account required.

Three layers of defense, all on by default and all on-device:

1. URL heuristics — instantly catches lookalike domains (paypal-secure-login.com), IDN homograph attacks (apple.com written with Cyrillic letters), suspicious TLDs, IP-literal hosts, and embedded credentials. Offline, private, sub-millisecond.

2. DOM signals — flags password fields on plain HTTP, login forms posting to a different domain, login pages themed for one brand but hosted on another, hidden iframes sized for clickjacking, and urgency language pressuring you to act fast.

3. Vision AI scan — when you click Scan now, SYBA Shield captures the visible tab and asks a multimodal AI to look at the page like a human would. It catches fake browser warnings, fake MFA prompts, lookalike logos, and "your account is locked" pressure tactics that pure URL checks would miss.

When SYBA flags a phishing page it warns you — it does not block you. You get a clear on-page warning with the exact reasons and a one-click "trust this site" if it is a false alarm, plus a system notification. You stay in control of the page. Prefer a harder stop? A full-screen warning wall and a strict block-the-page mode are both available in settings.

Email guard. On Gmail and Outlook on the web, SYBA Shield scans the email you open for the classic phishing tells: link text showing one domain while the link points to another, lookalike link domains, sender names impersonating a brand they do not own, and stacked urgency language. It all runs locally — nothing about your email is sent anywhere.

Network monitoring. SYBA Shield watches outgoing requests and flags suspicious destinations: brand-imitation domains, IP-literal hosts, IDN homographs, and suspicious TLDs. You see it all in the activity log.

Chat with the agent. See something off and want a second opinion? Click Chat with agent — it already has your current page URL and verdict in hand. Ask in plain English: "Is this safe?" "Why is this domain flagged?" "What is this site actually for?"

OS-level notifications. When SYBA Shield catches a high-confidence phishing page or a malicious network request, you get a system notification immediately.

Sign in with your Syba Insurance account and scans run through SYBA's secure backend, no API key needed on your device. Want to bring your own model? Paste an OpenRouter key in settings.

What you can adjust:
- Auto-protection on/off
- Warning style: notify (banner plus notification, never blocks), warning wall, or strict full-page
- Email guard on/off
- Notifications on phishing only, or also on suspicious
- Sensitivity (Paranoid / Balanced / Lenient)
- Vision model (Gemini 2.0 Flash, Claude Haiku, GPT-4o mini, and more)

What we never do:
- Send your browsing history anywhere.
- Take background screenshots. Vision scans only happen when you click.
- Store anything in the cloud unless you sign in to Syba Insurance.
- Show you ads.

Made by Syba Insurance, the cyber concierge for the AI era.