Skip to content
Use case · email providers & ESPs

A "Check this mail" button. In your branding.

You run a mail service - Web.de, GMX, mailbox.org, Tutanota, or a helpdesk tool. Scampilot delivers the phishing analysis; your customers see it in your brand.

"Our users want to know if a mail is a scam. We don't want to train our own model."- PM, German mail provider
White-label options Logo, colours, footer text, domain for report URLs. All configurable per tenant.
01
What you get

One pipeline. Your brand. Your customers.

You own the customer relationship; we deliver the analysis infrastructure.

White-label reports

Report page at your-brand.com/scam-check, with your logo, your colour, your domain. Powered-by note optional in the footer.

API + webhooks

JSON in, JSON out. Per report an optional webhook to your analytics - with verdict, confidence, cluster hash.

Consumption billing

Pay-per-scan or volume commit. Precise token accounting per analyzed mail. One PDF per month, done.

Localization

German and English out of the box. Other languages on request - the model usually already knows them; we test.

Your DPA template

We sign your standard DPA, not the other way round. Sub-processor list, data flows, retention - all documented.

Co-marketing

If you want, we do a joint case study. If you don't, your end customers won't see us at all.

02
Integration example

What an end user sees.

Two weeks of integration. Then the feature is there as if it had always been part of your product.

01

Right-click in the inbox

Your end user right-clicks a mail in your webmail UI and chooses "Check with Scampilot". Your UI shows a loading spinner with your logo.

02

Background API call

Your backend calls POST /api/v1/scan with the mail (incl. headers). Bearer token, tenant hint in the request. Reply in under 5 seconds.

03

Report in white-label layout

You render the report response in your own layout. We deliver structured JSON; you turn it into a card in your design system.

04

Optional: shareable report URL

If the end user wants to show the report to someone (e.g. a daughter), they get a signed URL on your domain. Valid 7 days.