Click Protect

Click Protect gives you and your family one-button protection from today's most dangerous online threats — phishing, malware sites, AI prompt injection, and social engineering.

🛡️ WHAT IT DOES
Nine detection engines run on your device:
• Phishing Detection — fake login pages, brand impersonation across 756 tracked brands and 1,470 known-good domains, typo-squat domains, 32 monitored suspicious TLDs
• AI Scam Shield — AI-generated phishing text, urgency tactics, authority impersonation
• Social Engineering Detector — manipulation and emotional-pressure patterns
• Prompt Injection Guard — hidden text and zero-width characters that hijack AI assistants
• Behavioral Monitor — credential exfiltration, suspicious requests, DOM manipulation
• Social Media Scanner — privacy-setting exposure on Facebook, Instagram, X, LinkedIn, TikTok
• QR Phishing Scanner — decodes QR codes on pages and checks the embedded URLs
• Dark Pattern Detector — fake urgency countdowns, confirmshaming, hidden costs, trick questions
• AI Chat Privacy Firewall — script injection and cross-origin exfiltration on AI chat platforms, plus scams the chatbot itself relays to you

It also blocks known phishing and malware URLs from public threat-intelligence feeds (PhishTank, URLhaus) using a bundled, signed rule set that refreshes every six hours.

🔒 PRIVACY
Detection runs locally in your browser. Page content, form values, and passwords are never transmitted.

For reputation lookups, only the first 4 bytes of a SHA-256 hash of the URL and domain are sent, so the server cannot tell which page you visited. A full page address — minus its query string and fragment — is transmitted in one specific case: when the on-device engines have already scored the page suspicious AND the page carries a login or payment form. Only then is it checked against Google Safe Browsing and domain-age reputation. We would rather state that exception plainly than claim nothing ever leaves your device.

Choose from three privacy levels:
• Standard — reputation lookups using hash prefixes
• Strict — anonymized reporting, threat descriptions redacted
• Fortress — zero data sent to our servers, all detection local

👨‍👩‍👧‍👦 BUILT FOR FAMILIES
Family admins can manage protection for every member from a single dashboard. See threat activity, adjust settings per device, and keep everyone safe without needing technical expertise.

⚡ SIMPLE TO USE
One click to activate. No configuration required.

PERMISSIONS EXPLAINED
Click Protect requests four permissions, and no host permissions:
• declarativeNetRequest — block dangerous URLs before they load
• storage — save your settings and protection state
• alarms — schedule blocklist updates
• tabs — open the dashboard and blocked-page warnings

One optional permission is requested only if you turn on the Extension Supply Chain Detector, which watches your other extensions for rogue updates. It is off unless you enable it.

No data is sold. No ads. No tracking.

Privacy Policy: https://app.clickprotect.ai/privacy
Support: [email protected]