SOC workspace
Triage a suspicious email
Email content stays in your browser until you click Analyze. We never persist it — no history, no shareable links.
Nothing stored
Input · raw email source
0 chars
Email content is sent to a third-party AI provider only when you hit Analyze. Use Redact to scrub PII first — it runs entirely in your browser.
Awaiting input
Report will render here
Verdict, indicators, header forensics, URL breakdown and IOCs.
- 01Paste full raw source for the strongest verdict — header forensics is the highest-signal layer.
- 02Use Redact to strip emails, IPs, phone numbers, and custom terms before sending.
- 03Indicators are evidence-backed: each finding quotes the snippet from the email.