Kytheos · Guardian
Is this safe?
Paste a suspicious link, email, or file. Guardian explains what it is and what to do — in plain language, without the jargon.
Kytheos Guardian is a free tool that checks whether a link, email, or file is a scam, phishing, or malware and explains why in plain language. Paste what you received, and Guardian tells you whether it looks dangerous, the reasons behind that verdict, and what to do next — no account required, and your submission is analyzed in memory and never stored.
Kytheos never stores your submission longer than needed to produce a result.
Results
Submit a link, message, or file above to see a plain-language explanation here.
Key terms, defined
- Phishing
- Phishing is a scam where an attacker impersonates a trusted person or company — usually by email, text, or a fake website — to trick you into revealing passwords, payment details, or other sensitive information.
- Malware
- Malware is malicious software (viruses, trojans, ransomware, spyware) designed to damage a device, steal data, or take control of a system, often delivered through a file download or a booby-trapped link.
- Indicator of Compromise (IOC)
- An indicator of compromise is a piece of forensic evidence — such as a malicious URL, file hash, or IP address — that suggests a system or message is linked to a known attack.
Frequently asked questions
How do I check if a link is a scam?
- Paste the link into Kytheos Guardian. Guardian inspects the URL for known scam and malware signals — such as look-alike domains, suspicious redirects, and matches against threat databases — and returns a plain-language verdict explaining whether it is safe to open and why.
Is Kytheos Guardian free?
- Yes. Kytheos Guardian is completely free to use and does not require creating an account or entering payment details.
Is my data stored?
- No. Anything you paste into Guardian — links, email text, or files — is analyzed in memory on the server and is not stored or logged. Guardian is designed to be privacy-first, so your submission is not retained after you get your answer.
How does Guardian know if an email is phishing?
- Guardian examines the email for common phishing techniques: mismatched or spoofed sender addresses, deceptive links that point somewhere other than the text suggests, urgent or threatening language, and requests for passwords or payment. It then explains, in plain language, which of these signals it found so you can judge the risk.
Is this file a virus? Can Guardian check a file?
- Guardian can inspect a file you upload for malware indicators — such as risky file types, suspicious embedded content, and matches against known-bad file signatures — and explains what it found in plain language. Guardian gives a risk assessment and guidance; it is a first-line explainer, not a replacement for full endpoint antivirus.