SOC workspace

Triage a suspicious email

Email content stays in your browser until you click Analyze. We never persist it, no history, no shareable links.

Input · raw email source
0 chars

Email content is sent to a third-party AI provider only when you hit Analyze. Use Redact to scrub PII first, it runs entirely in your browser.

Awaiting input

Report will render here

Verdict, indicators, header forensics, URL breakdown and IOCs.

  • 01Paste full raw source for the strongest verdict, header forensics is the highest-signal layer.
  • 02Use Redact to strip emails, IPs, phone numbers, and custom terms before sending.
  • 03Indicators are evidence-backed: each finding quotes the snippet from the email.