PhishAlert LogoPhishAlert

How it's built

Data centre aisle with rows of server cabinets

Serverless app layer

The application runs on a serverless platform that scales out automatically under load. There are no servers to provision or babysit, capacity follows demand.

Data centre floor

Tenant-isolated data

Every organisation's data lives in a Postgres database with per-tenant isolation, so one customer's data is never mixed with another's, including across an MSP's clients.

Engineer monitoring server infrastructure

Background processing

Email analysis, simulation sends, and usage metering run on scheduled background workers, off the request path, so the dashboard stays responsive while heavy work happens behind the scenes.

Enterprise controls

The access, privacy, and governance features security and IT teams expect, shipping today.

Single sign-on (Microsoft Entra ID & Google)
Role-based access control
Full audit logging
PII redaction on analysed content
GDPR data-subject rights (export & deletion)
EU data residency
Multi-tenant isolation (MSP-ready)

On the roadmap

SCIM user provisioningPre-built SIEM / SOAR connectors

Fits your existing workflow

Native Outlook and Gmail add-ins put reporting where users already work, and an API with scoped keys lets you submit emails and pull events into your own tooling, including your SIEM or SOAR. Named, pre-built SIEM/SOAR connectors are on the roadmap.