OKY

Phishing defence usually lives inside the mail server, invisible to the person actually being attacked. OKY puts the verdict where the user already is — in the mail thread, the browser, the phone — and explains in plain language why something looks wrong. A silent filter teaches nobody anything; a good explanation makes the next attempt easier to spot.

I built all of it alone: the product, the analysis engine, seven client surfaces across five platforms, and the operations behind them.

It is live with real users and published on the Chrome Web Store. Early — a small cohort rather than scale — and beta is the honest word.

I do not write publicly about how it decides, what it inspects, or how it is deployed. For a live security product that is just a map for its adversaries. Happy to go deep in conversation.