Anti-phishing platform covering simulation, detection, triage, and response in one system

dPhish treats phishing as three separate problems that most organisations buy from three separate vendors. Before an attack, Drill-Phish delivers simulation campaigns and gamified awareness modules with content mapped to job roles, tracking behaviour over time rather than scoring a single click rate. During an attack, Discover-Phish looks outward, using threat intelligence to surface phishing pages, lookalike domains, and campaign infrastructure across channels, and renders what it finds as attack graphs so an analyst can see how the pieces connect. After an attack, Detect-Phish takes the mailbox reports employees submit, runs AI and rule-based analysis over them, and automates the triage step that normally consumes a tier-one analyst's day.

The platform is API-first, integrating with Microsoft 365 and Google Workspace on the mail side and with Splunk, QRadar, and similar tooling on the operations side, and it deploys on-premises or in the cloud. Multi-tenancy and regional data residency in Saudi Arabia, the UAE, and the EU make it workable for MSSPs and for customers bound to PDPL, GDPR, or the Saudi NCA Essential Cybersecurity Controls. Content in Arabic as well as English is a deliberate fit for its home market. dPhish is based in Cairo, is backed by F6 Ventures, and won Best Cybersecurity Startup at BlackHat MEA in 2023. The company says Detect-Phish cuts analyst workload on reported mail by 88 percent.