SYBA Cybersecurity Agent

About

SYBA Shield is the cyber-concierge that lives in your browser toolbar. Toggle it on with one click and every page you visit gets a security check.

Three layers of defense, all on by default:

1. URL heuristics — instantly catches lookalike domains (paypal-secure-login.com), IDN homograph attacks (apple.com written with Cyrillic letters), suspicious TLDs, IP-literal hosts, embedded credentials. Offline, private, sub-millisecond.

2. DOM signals — flags password fields on plain HTTP, login forms posting to a different domain, login pages themed for one brand but hosted on another, hidden iframes sized for clickjacking, urgency language pressuring you to act fast.

3. Vision AI scan — when you click Scan now, SYBA Shield captures the visible tab and asks a multimodal AI to look at the page like a human would. It catches fake browser warnings, fake MFA prompts, lookalike logos, and "your account is locked" pressure tactics that pure URL checks would miss.

Plus the v0.2 features:

Network monitoring. SYBA Shield watches every outgoing request your browser makes and flags suspicious destinations: brand-imitation domains, IP-literal hosts, IDN homographs, and suspicious TLDs. You see it all in the activity log.

Chat with the agent. See something off and want a second opinion? Click Chat with agent — the agent has the screenshot of your current page, the URL, and any verdict already in hand. Ask in plain English: "Is this safe?" "Why is this domain flagged?" "What is this site actually for?"

OS-level notifications. When SYBA Shield catches a high-confidence phishing page or a malicious network request, you get a system notification immediately. No need to keep the popup open.

Sign in with your Syba Insurance account and scans run through SYBA's secure backend, no API key needed on your device. Want to bring your own model? Paste an OpenRouter key in settings.

What you can adjust:
- Auto-protection on/off
- Notifications on phishing only, or also on suspicious
- Sensitivity (Paranoid / Balanced / Lenient)
- Vision model (Gemini 2.0 Flash, Claude Haiku, GPT-4o mini, and more)

What we never do:
- Send your browsing history anywhere.
- Take background screenshots. Vision scans only happen when you click.
- Store anything in the cloud unless you sign in to Syba Insurance.
- Show you ads.

Made by Syba Insurance, the cyber concierge for the AI era.