SurfVigil

About

SurfVigil is a real-time browser security extension that protects you from four classes of web threats using machine learning:

PHISHING – detects fake login pages mimicking trusted brands
XSS – catches injected JavaScript attacks before they execute
CRYPTOMINING – identifies pages secretly using your CPU to mine cryptocurrency
ANOMALY – flags pages with unusual structural patterns that don't match normal browsing

HOW IT WORKS

Every time you load a page, SurfVigil extracts about 70 lightweight signals from the page (URL structure, DOM patterns, script behavior, network traffic shape) and sends them to a hosted ML backend that runs an ensemble of four trained models. The combined verdict appears as a colored badge on the toolbar:

✓ Green – Safe
! Orange – Warning
✕ Red – Blocked

When a page is blocked, you see a clear warning page with the reason and an option to continue anyway if you trust the site.

PRIVACY

SurfVigil sends extracted feature signals (not raw page content) to its backend for analysis. URLs are logged for audit purposes. The extension does not read your form inputs, passwords, or cookies. See the privacy policy for full details.

FEEDBACK LOOP

If SurfVigil makes a mistake — flagging a safe site or missing a threat — click the toolbar icon and use "Report Safe" or "Report Threat." Your feedback feeds into periodic retraining.

OPEN SOURCE

This is a portfolio / educational project. The backend code is available publicly on Hugging Face Spaces.