PhishCatch

Identify and prevent enterprise password leaks

PhishCatch is a privacy-respecting web browser extension that can help prevent account takeover of enterprise identities. PhishCatch monitors browser activity to: * Detect when users enter their enterprise password(s) on external websites. * Prevent password leaks on impersonated authentication pages. * Allow users to report visited pages as suspicious. Empower security teams to quickly detect and respond to these attacks. PhishCatch supports centralized management via Microsoft Group Policy (GPO) for Windows clients and Jamf Pro for MacOS clients. High-Level Functionality PhishCatch is installed as an extension in your browser. You may choose to install it from the respective Browser Store, or compile and redistribute it yourself. PhishCatch is designed to communicate with a listening post server broadly accessible on the Internet. This server will be used to receive PhishCatch detections and other notifications for forwarding to your security information and event management (SIEM) or other system. The Github repo includes a functional LP server for rapid deployment. PhishCatch can be deployed in standalone mode with no external connectivity. Detailed configuration steps can be found on the wiki at https://github.com/palantir/phishcatch/wiki