One click is all it takes.
Heron catches it before you do.
Watch a routine inbox turn into a breach in fifteen seconds, then watch Heron catch it. Drop in any email and get an instant verdict, with the signals that gave it away.
Your account is suspended - verify immediately
alerts@vai-support.co → hire.vishalpatil@gmail.com · 9:41 AM
Hi Vishal,
We detected a suspicious sign-in from an unrecognized device in Bucharest, RO at 03:12 UTC. Your account has been temporarily suspended.
Sign in below to confirm your identity within 24 hours.

Heron would've caught this.
Spoofed sender, lookalike domain, credential-harvest form. Flagged and quarantined before it reached the inbox.
AI supercharged phishing.
The same models that write your emails now write the scams. Three things changed at once.
Cheaper
Generative models spin up flawless phishing kits for pennies - no skill required.
Faster
A convincing, personalized lure is now seconds of work, not hours.
More convincing
Pixel-perfect brand clones and fluent copy slip straight past text-only filters.
How Heron sees an email.
Three specialists look at the same email from different angles, then fuse into one decision.
Reads the text
A text CNN weighs language, urgency, and vocabulary - 256 signals from the words alone.
Sees the logos
An image CNN catches visual brand impersonation in embedded logos - 512 features.
Weighs the metadata
20 engineered signals - shortened URLs, caps, suspicious domains - distilled to 64.
832 fused features become a phishing-or-legitimate verdict with a confidence score.
Heron would've caught this.
Spoofed sender, lookalike domain, credential-harvest form.
Heron reads the signals and calls it before you click.