Keeper Security Unveils AI-Driven Phishing Protection to Combat Credential Theft
In an innovative move to enhance online security, Keeper Security has rolled out a groundbreaking AI-powered phishing protection feature aimed at shielding users from inadvertently entering their credentials on fraudulent websites. This new capability, which is accessible through the Keeper Browser Extension, leverages a local AI engine to effectively identify look-alike domains, spoofed websites, and attempts at brand impersonation. By pinpointing suspicious login pages directly within the user’s browser, this feature aims to thwart credential theft before sensitive information can be compromised by cybercriminals.
This launch is particularly timely as credential-based attacks continue to represent a major threat to organizations globally. The recent 2026 Verizon Data Breach Investigations Report highlights that nearly 40% of breaches were linked to credential abuse. This alarming statistic underscores the urgent need for enhanced protective measures against increasingly sophisticated phishing tactics employed by cybercriminals.
Moreover, the rise of generative AI has enabled cybercriminals to devise remarkably convincing fraudulent websites and login portals that closely mimic legitimate services. This evolution has made it increasingly challenging for users and traditional security tools to discern phishing attempts from authentic sites. As phishing attacks grow more elaborate, the need for robust, proactive defenses becomes even more critical.
Setting itself apart from conventional phishing detection tools, which often depend on cloud-based analysis, Keeper’s new feature utilizes machine learning capabilities that function entirely on the user’s device. This innovative approach is rooted in Keeper’s zero-knowledge security architecture, allowing the technology to analyze websites locally without any user data being transmitted to external servers. This commitment to user privacy is a cornerstone of Keeper’s design philosophy.
Darren Guccione, CEO and Co-founder of Keeper Security, elaborated on the nature of modern phishing threats, noting, “Phishing attacks are no longer simple email scams; they are highly automated, AI-driven operations designed to trick users into handing over sensitive credentials and information.” Guccione emphasized that traditional security measures often falter against adversaries who deploy look-alike domains or unofficial login portals, frequently only exposing the threat after damage has occurred. By embedding zero-knowledge AI functionality into its browser extension, Keeper aims to halt credential harvesting at the point of entry, thereby enhancing security and user control.
Detecting Phishing Attempts at the Point of Entry
The Phishing Protection feature from Keeper automatically scrutinizes web pages for attributes commonly affiliated with credential-harvesting schemes. This includes identifying typosquatting techniques, where attackers utilize domains that closely resemble legitimate sites, as well as suspicious IP addresses, unusual URL structures, and unauthorized websites requesting sensitive information like passwords.
When a potential threat is detected, users are presented with a warning that outlines the suspicious activity and the specific indicators identified. The interface allows users to assess the warning, choose to dismiss it, or disable Keeper’s protection on the affected website, providing a level of control over their security. Users can also manage previously blocked sites and adjust autofill functionality where it is deemed safe.
This feature is designed as an additional layer of defense against phishing attacks that successfully evade existing email security protocols and web filtering technologies, thereby reinforcing Keeper’s commitment to safeguarding user data.
Privacy and Administrative Control
Highlighting the privacy-centric design of this new capability, Keeper emphasizes that its AI engine processes website data locally rather than sending sensitive information to external servers. Craig Lurey, the CTO and Co-founder of Keeper Security, remarked, “Security controls have to work at machine speed, and they cannot come at the expense of the zero-knowledge guarantees our customers depend on.” He elaborated that the AI engine operates entirely on the local device, utilizing the customer’s private key to provide continuous, proactive verification of web assets. This ensures that autofill features remain safe from sophisticated domain spoofing threats without compromising user privacy.
For organizations, the feature is optional and is set to be disabled by default. However, enterprise IT administrators have the capability to enable and oversee this function centrally via the Keeper Admin Console, while individual users can tailor their preferences directly within the browser extension.
Keeper Phishing Protection is now available as an opt-in feature in version 18.2.0 of the Keeper Browser Extension, further solidifying Keeper Security’s position as a leader in the cybersecurity space by addressing one of the most concerning threats in the digital landscape.