SYBA Cybersecurity Agent — the AI agent that watches your browser

What it does

Nine ways it catches the attack before you do.

Watches every tab, automatically

The agent evaluates each page the moment it loads — real-time, passive, no click required. It reads the page the way a fraud analyst would.

Phishing + brand impersonation

Lookalike and typosquat domains, IDN / homoglyph spoofs (Cyrillic “аррӏе” → apple), fake login pages and credential traps. On-device URL + DOM heuristics, under 10ms.

A–F site grade, scored /100

Every site gets a letter grade and a findings list. Open “See full audit” or ask the agent to “Explain in detail.”

Network sentry

Watches every outbound request and flags suspicious traffic before it leaves — declarativeNetRequest plus the request monitor.

Vision AI — the agent sees what you see

On the pages that matter, it reads the rendered screen to catch scams the URL alone won’t reveal: fake MFA prompts, fake browser warnings, tech-support scams, lookalike logos. Opt-in.

OS-level alert before you enter danger

A native banner steps in the moment something is wrong — outside the page the scammer controls.

Streaming chat agent

Ask “why did you flag this?” and the agent explains the actual signals it saw. Optional sign-in unlocks chat and syncs your allowlist across devices.

One-click allow / report

“Allow this site” trusts and reloads instantly. “Report safe / false positive” teaches the agent — bypassing the 5-domain manual cap.

167-domain safe allowlist

A curated allowlist of major legit services and brand-owned CDN + auth infrastructure, so the agent never false-flags the sites you use every day.

Private by design

SYBA never sees your passwords or keystrokes.

The free, on-device tier runs locally — URL heuristics, DOM signals, the network sentry and the letter grade. No browsing data leaves your device. Vision AI and chat are explicit opt-in cloud tiers, and even then they send only a screen frame and the URL or title — never passwords, keystrokes, cookies, or browsing history.

Never sees your passwords or keystrokes — verbatim from the UI.
On-device free tier: no browsing data leaves your device.
Vision AI and chat are explicit opt-in — sign in, or use your own key.
When a cloud feature runs, it sends only a screen frame + the URL or title.

How it works

Three honest tiers. Strong by default, deeper when you opt in.

01Free · no account

On-device heuristics

URL heuristics, DOM signals, the network sentry and the A–F letter grade run locally. No browsing data leaves your device. This is the default, the moment you install.

02Sign in or own key

Opt-in Vision AI scan

On the pages that matter, the agent captures a single screen frame and reads it to catch scams the URL hides. Explicit opt-in — sign in to SYBA or supply your own OpenRouter key.

03Synced across devices

The AI agent that watches your browser and flags the scam before you click.