PhishGuard
Display-name spoofing, lookalike domains, credential-harvest pages, and attachment lures — scored against sender history rather than a static block list.
Phishing · Smishing · Vishing
Identity-risk defense across every message.
Attacks don't arrive in one inbox anymore. They arrive as an email, a text, and a phone call that all reference the same fake invoice. NullPoint reads all three as one campaign — so you catch the pattern, not just the message in front of you.
PhishGuard Email and attachment lures
SmishGuard SMS, RCS, and short links
VishGuard Voice and callback pressure
Try it now
Paste a suspicious message.
Load one of the samples or paste your own. Nothing leaves your browser — this runs offline, on this page, and highlights the language and link patterns that social engineering relies on.
Message
Runs locally · nothing uploaded
Awaiting input
no signals yet
Load a sample or paste a message, then choose Inspect message.
What this is. A transparent heuristic preview — pattern rules you can read, not a model score. The trained PhishGuard, SmishGuard, and VishGuard classifiers run inside Signal Deck after you sign in, with URL reputation, sender history, and cross-channel campaign linking that a single pasted message can't show.
Coverage
Three channels, one campaign view.
Each guard is tuned to how its channel actually gets abused — then the deck correlates them.
SmishGuard
SMS & RCS
Short links hide their destination by design. Delivery-fee, toll, and bank-alert pretexts get resolved and rated before you decide whether to tap.
VishGuard
Voice
Callback numbers, authority impersonation, and secrecy pressure are the tells in a voice script. Transcripts are read for coercion structure, not keywords alone.
How it works
Connect, correlate, decide.
-
Connect a mailbox
Link Gmail or Microsoft with OAuth from the Connectors page. Scopes stay read-only, and you can revoke from your provider at any time.
-
Messages get scored
Each item is rated per channel, with the contributing signals shown next to the verdict — so a decision is reviewable rather than a number you have to trust.
-
Campaigns surface
When the same pretext shows up by email, text, and phone, the deck groups them so you see one coordinated attempt instead of three unrelated alerts.
Ready to look at your own inbox?
Signal Deck is the protected workspace for signed-in customers and operators.
Sign in to Signal Deck