Ratio’d DEFENSE · V1.0
DEVELOPED BY VEDANT

Check the message,
not your luck.

Paste a sketchy email or text. Ratio’d scrubs your personal info in the browser, runs it through a deterministic threat engine, and hands you a plain-language verdict with a recovery checklist.

Analyze a message
[ SYSTEM ALERT: AIR-GAPPED CLIENT REDACTION ACTIVE ]
ZERO DATA STORED

Coming soon Ratio’d is also being built for Outlook and other mail clients — Thunderbird, Apple Mail and the rest are on the roadmap. The console above already works with any pasted message, whatever your inbox.

Telemetry input

PASTE ZONE
Channel:
Try a sample:
✓ Real-time PII redaction active: No sensitive phone, email, or OTP patterns found.
OPTIONAL Headers & Authentication (SPF / DKIM / DMARC)

Specify email authentication headers to test SPF/DKIM spoofing detection:

Privacy guarantee
Phone numbers, email addresses, and verification codes are redacted client-side before rule processing. No message content is ever written to logs or disk.
SAFE PEEK Zero-Click Link & Redirect Tracer

Unmask shortened URLs (bit.ly, t.co) & inspect redirect chains safely using zero-execution HEAD requests.

QR phish check

  1. 1 CAPTURE
  2. 2 DECODE
  3. 3 ANALYZE
  4. 4 VERDICT

Drop / paste a QR image, or

Live analysis center

OUTPUT
RISK
[ VERDICT · READY ]
0/100

Awaiting message payload analysis...

Annotated threat inspector
Paste a message and click Analyze to view the threat breakdown.
Recovery checklist
  • • Awaiting threat analysis report.
Get the extension

Read every email before you trust it

One click from the Chrome Web Store puts a live risk verdict inside Gmail. The banner renders inside its own Shadow DOM, so Gmail styling can never break it.

Coming soon Ratio’d is also being built for Outlook and other mail clients — Thunderbird, Apple Mail and the rest are on the roadmap. The console on this page already analyses any pasted message, whatever your inbox.

0 of 5 done

Installing from the Chrome Web Store is one click — use the button on the left and you are done. The steps below are only for the manual ZIP route, which is useful if you want the unpacked build to inspect or modify.

  1. Download the ZIP

    Use the “Or install the ZIP manually” link on the left. It saves to your normal Downloads folder.

    ⬇ Download again

  2. Unzip it

    Double-click ratiod-extension.zip. You should end up with a folder that contains manifest.json.

    Safari on macOS unzips automatically — skip to step 3. On Windows: right-click the ZIP → Extract All.

  3. Open the extensions page

    Copy the address below and paste it into your Chrome address bar.

    chrome://extensions

    Chrome blocks links to chrome:// pages from any website, which is why this one needs a copy-paste.

  4. Load it

    1. Turn on Developer mode with the toggle in the top-right corner.
    2. Click Load unpacked in the toolbar that appears.
    3. Pick the unzipped folder — the one containing manifest.json, not the ZIP file.

  5. Open Gmail and try it

    Click any email in your inbox and the verdict banner appears at the top of the message.

    Open Gmail Test in the console

If something goes wrong

"Load unpacked" is missing

Developer mode is not on yet. Toggle it in the top-right of the extensions page and the toolbar with Load unpacked appears.

Chrome says "Manifest file is missing or unreadable"

You picked the ZIP instead of the extracted folder. Go back, extract the archive, and choose the folder containing manifest.json.

The banner never appears in Gmail

Refresh Gmail once with Cmd+R (Windows: Ctrl+R) after loading, then open an email you have not already got open. The extension only runs on mail.google.com.

The banner shows "engine unreachable"

Rare — the extension talks to the live API automatically. Check your connection and reload the email. If you run the project locally, npm start and the banner will prefer that.

How do I remove it?

Open the extensions page, find Ratio’d, click Remove. Nothing was stored locally, so there is nothing to clean up.

Architecture

Every stage of the pipeline

Ten stages from the Gmail tab to the verdict banner. Stages 1–3 and 10 run in your browser — your phone numbers, email addresses and OTP codes are masked before anything crosses the network boundary.

Stage 01 / 10

Pipeline

Live 4-stage verification

A deterministic client-side inspection pipeline that runs before any external model is ever invoked.

01
Stage / Observe

Observe

Raw message capture & immediate client-side PII masking (phones, emails, OTPs).

02
Stage / Detect

Detect

Deterministic rule checks for lookalike domains, link mismatches & urgency triggers.

03
Stage / Explain

Explain

In-context threat span highlighting with grounded, plain-language risk explanations.

04
Stage / Respond

Respond

Tactile risk score reveal (0–100) & a prioritized incident recovery checklist.

Features

Built chunky, built careful

Everything that touches your message happens where you can see it.

Client-side · Stable

Local PII redaction

Phone numbers, email addresses, and OTP sequences are stripped in browser memory before any telemetry processing. Zero storage.

Rules + Laya

Hybrid threat engine

Combines deterministic domain lookalike & urgency rules with local classifier scoring for high-precision fraud detection.

SMS · Email

Multi-channel support

One unified backend API supporting both the paste console and real-time Gmail Chrome extension injection.

Roadmap

Release roadmap & architecture

CURRENT
01
Demo

Hackathon prototype

Client-side redaction, local Express rule server, GSAP pipeline, and Chrome Manifest V3 Gmail extension.

02
Pilot · Upcoming

Campus pilot

Custom domain lookalike database, organizational phishing alerts, and standalone Laya container integration.

03
Production · Future

Public release

Zero-knowledge encrypted telemetry API, multi-browser extensions, and enterprise security dashboard.

Available on the Chrome Web Store