Security Overview

Email Threats

0

Last 7 days

Network Attacks

0

Last 7 days

Protected Accounts

0

Active

Detection Rate

--

Accuracy

Recent Threats (Live)

No recent threats detected

Email Threat Types

Network Attack Types

No quarantined emails

WAF Shield Status

ACTIVE

Live Requests Streamed

0

Blocked Attacks (30d)

0

Live Request Stream

Waiting for traffic... Send requests to your website to see them live.

Blocked Attacks (30-Day Retention)

No network attacks detected in the last 30 days

No Google approval needed — Connect any email instantly

Use App Passwords to connect Gmail, Outlook, Yahoo or any IMAP mailbox without waiting for Google OAuth review. Anyone can connect their email right now — no test user list required.  Get a Gmail App Password →

🛡️ Email Protection Setup Guide

📢 Connecting Google / Gmail Accounts

If you see a "Google has not verified this app" screen:

  1. Click "Advanced" link on the bottom left.
  2. Click "Go to ciphrai.onrender.com (unsafe)" to proceed.
  3. Note: This is standard while completing the Google OAuth verification process.
🏢 Connecting Microsoft Work/School Accounts

Admin Consent Needed: Microsoft 365 requires IT admin approval for security apps:

  1. Copy and send the Admin Consent Link below to your IT Admin.
  2. The Admin logs in and clicks "Accept" to authorize the platform.
  3. After approval, any company employee can connect their email!

No email accounts connected

Choose Your Platform

Select your website type to get the right installation instructions:

1

Generate API Key

First, create an API key to connect your website to Ciphrai.

💡 Localhost / local website testing is fully supported! Simply use your API key in your local code.

Your API Keys

2

Download the WordPress Plugin

Click below to download the Ciphrai Protect plugin for WordPress:

Download Plugin (ZIP)

Save this file to your computer. You'll upload it to WordPress in the next step.

3

Install the Plugin

  1. Log into your WordPress Admin Dashboard
  2. Go to Plugins → Add New
  3. Click "Upload Plugin" at the top
  4. Click "Choose File" and select the ZIP you downloaded
  5. Click "Install Now"
  6. After installation, click "Activate Plugin"
4

Enter Your API Key

  1. In WordPress Admin, go to Settings → Ciphrai Protect
  2. Paste your API Key from Step 1
  3. Click "Save Settings"

Done! Your WordPress site is now protected. Check the Network Threats page to see blocked attacks.

2

Add the Protection Script

Copy this code and paste it into your website's HTML, just before the closing body tag:

<script src="https://cdn.ciphrai.com/protect.js" 
        data-key="YOUR_API_KEY"></script>

Replace YOUR_API_KEY with the key from Step 1!

3

Where to Add the Code

📍 Location varies by platform:
  • Wix: Settings → Custom Code → Add Code → Before Body End
  • Squarespace: Settings → Advanced → Code Injection → Footer
  • Shopify: Online Store → Themes → Edit Code → theme.liquid
  • Custom HTML: Add before the closing body tag
4

What Gets Protected

The JavaScript SDK protects against client-side attacks:

  • ✓ XSS (Cross-Site Scripting) attempts
  • ✓ Malicious form submissions
  • ✓ Bot and scraper detection
  • ✓ DOM manipulation attacks

For full server-side protection, consider WordPress plugin or Node.js package.

2

Install the Package

Open a terminal in your project folder and run:

npm install ciphrai-protect
3

Add to Your Server

Add these lines to your Express.js server file:

const express = require('express');
const ciphraiProtect = require('ciphrai-protect');

const app = express();

// Add before your routes
app.use(ciphraiProtect('YOUR_API_KEY'));

app.listen(3000);

Replace YOUR_API_KEY with the key from Step 1!

4

Test Your Protection

Try sending a test attack to your server:

curl "http://localhost:3000/?id=1 OR 1=1"

You should see a 403 Forbidden response!

No audit logs

Scan a Target

Enter a domain name or IP address to scan for vulnerabilities.

Scan History

No scans yet. Enter a domain above to get started.

-- Security Score
0Total Threats
0Blocked
0%Block Rate
0Protected Accounts

Threat Trends

Loading trend data...

Top Targeted Employees

No data yet

Threat Type Breakdown

No data yet

Compliance & Insurance Report

Generate a professional security posture report for board meetings, auditors, or cyber insurance applications.

Domain Authentication Check

Verify your domain's SPF, DKIM, and DMARC records to prevent email spoofing.

Lookalike Domain Scanner

Scan for typosquatting and impersonation domains that could be used to attack your company.

Domain Alerts

No domain alerts yet. Run a scan above to get started.

0 Total DLP Events
0 Critical Findings
9 Active Policies

Detection Policies

Configure what types of sensitive data to scan for in outgoing emails.

Loading policies...

Recent DLP Events

No DLP events detected yet. Events will appear when sensitive data is detected in outgoing emails.

-- Company Score
--Overall Score
0Campaigns Run
0Employees Tracked

Create New Campaign

Select a phishing template and launch a simulation against your team.

Phishing Templates

Loading templates...

Employee Risk Scores

Risk scores are calculated based on employee responses to phishing simulations.

No risk data yet. Run a phishing simulation campaign to start tracking employee risk.

Campaign History

No campaigns yet. Create your first campaign above.