Deploy and manage - in one afternoon.
Browser extension, forwarding inbox, or API: Scampilot slots into your stack without touching the mail server. Quotas, tokens and audit log included.
Predictable, logged, no surprises.
Every limit is published. Tokens share a per-user bucket - no quota sharding.
MV3 extension
Deployable by policy. Toolbar scan and right-click check for everyone.
Scoped tokens
Bearer tokens with abilities. Revocable, logged, with a clear rate limit.
Audit log & export
Who checked what, when. GDPR export and deletion in one click.
Three steps to coverage.
Test small, then distribute by policy.
Create a token & test
Create a scoped token in the dashboard, test against the OpenAPI spec.
Distribute the extension
Roll out via group policy / MDM. Account linking optional.
Monitor
Watch usage and quotas in the dashboard, rotate tokens as needed.
Per mail: verdict, reasoning, evidence.
Exactly the format your SOC knows - with severity, indicators, and a signed audit entry.
Verdict enum
safe / warn / danger. Three levels, fixed. No scale inflation, no 10-step custom severities.
Signals with evidence
credential_request, urgency, lookalike_brand, payment_demand - each with a concrete quote from the mail.
Authentication
SPF, DKIM, DMARC from email headers feed into the prompt and into the signal set.
Cost telemetry
Per report: input_tokens, output_tokens, model_used. Per employee, per department - aggregatable.
Audit trail
Append-only database log of all token creations, report views, deletions. Available on request as CSV.
Heuristic fallback
If the AI provider is down, Scampilot keeps running rule-based. The report is flagged heuristic-fallback - your SIEM sees when it happened.
Frequently asked questions
How do I roll Scampilot out to my users?
Through the MV3 browser extension, email forwarding to personal aliases, the REST API, and webhooks - GDPR-compliant, EU-hosted, with no tracking.
Does the browser extension work in Chrome and Edge?
Yes, as a Manifest V3 extension. Users check text, links or images by right-click - including QR codes on the page - and see the verdict in the side panel.
Are there webhooks for check results?
Yes. You can configure webhooks for results and forward them to SIEM or ticketing systems.