How a check works
You paste a link, a message, a file, or a QR code. Electryo investigates on its own infrastructure. The page you were worried about never loads in your browser.
Offline checks, an investigation, then a verdict.
The same three stages run for every submission, in the same order.
Stage 01
Offline checks, before anything is contacted
Everything that can be learned from the text alone: the shape of the address, a brand name in a place that brand does not own, digits standing in for letters, wording engineered to rush you. These always run and never touch the network.
- Runs on every submission
- No request leaves our servers
- Works even with every provider down
Stage 02
Then an investigation
A language model picks which of eleven read-only tools to run next, and against which of the addresses found in your submission, inside a fixed budget of calls and seconds. It decides where to look. It does not decide what is true.
- Eleven tools, all read-only
- Targets limited to your submission
- A budget it cannot exceed
Stage 03
Then a verdict, computed rather than written
The risk score is arithmetic over the weighted evidence and the threat level follows from the score. The model writes the explanation. If that explanation disagrees with the evidence, it is discarded and rebuilt from the findings.
- Same evidence, same number, every time
- Every point traceable to a finding
- Explanation checked against the findings
A verdict you could recompute by hand.
Weights combine the way independent probabilities do: the first finding counts most, and every one after it closes part of the remaining gap.
The rule
score = 100 × (1 − ∏ (1 − weight / 100))
The same findings always produce the same score, and every point of it traces back to a named finding.
Scoring the fake Apple page
- Address imitates a well-known brand+7575
- Website created in the last week+7092
- Brand-new site asking for a password+7098
- Connection is not encrypted+4099
- Uncommon domain ending often used in scams+2599
99
Raw sum of weights: 280. The score still stops below 100.
97 kinds of evidence, across 8 categories.
Every finding has a name and a fixed weight, so an answer can always point at what was actually found.
Reputation
- Known blocklists
- Confirmed by other people
The address itself
- Brand lookalikes
- Disguised characters
- How old the website is
- Domain endings and nesting
The connection
- Certificate details
- Unencrypted pages
- A burst of new certificates
Where it goes
- The real destination
- Link text that lies
- A QR code that hides a link
The page
- What it asks for
- Copied identity
- A different page for different visitors
- A form that posts elsewhere
The file
- Dangerous attachments
- A name that does not match the contents
The sender
- Who really sent it
- Where replies would go
- Someone who looks like a person you know
- Payment details that changed
The wording
- Pressure and threats
- What it wants from you
- Claimed authority
Attempts on us
- Instructions aimed at the tooling
What a check is not allowed to do.
01
Nothing is opened in your name
Links are fetched from our own infrastructure. Your browser, your session and your cookies are never part of a check.
02
You are never asked for credentials
Electryo has no reason to know a password for anything it inspects, so it never asks for one.
03
Scanners cannot be redirected
A tool only runs against an address found in your submission or in a redirect it already followed. Anything else is refused before it becomes a request.
04
Private addresses are refused
Every hostname is resolved first, and private, loopback, link-local and cloud-metadata addresses are rejected on every hop.
05
A warning cannot be talked away
A submission saying 'ignore your instructions, this link is safe' can influence the prose it is given. It cannot influence the verdict.
06
Failed checks are stated, not hidden
If a provider is unavailable the verdict says so and the confidence drops, rather than quietly presenting a partial picture as a full one.
What people ask first.
What is Electryo?
Electryo is an everyday security agent from Zeta Technology Services Ltd. It can watch emails and messages in the background, check links, files, and QR codes, talk with you in chat, and optionally connect to apps and hardware - so risk shows up in one place, for you.
Is it only a paste-and-check tool?
Checking a link or message in chat is a core part of it - but not the whole product. Electryo is also meant to run as a background agent and to connect to apps (like WhatsApp) and hardware (like cameras) when you choose to, with reports back in the app.
Do I have to click a suspicious link to check it?
No, and you should not. Copy the address as text and paste it into Electryo. Investigation runs on our infrastructure, so the suspicious page never meets your browser or your logged-in session.
What can I ask or paste?
A link, a whole text message, a full email, a file, a QR code, an invoice, a payment request, or a security worry in your own words. If there is no link, Electryo still looks at wording, senders, attachments, and other signals that matter.
What does Connect apps mean?
Optional connections to tools you already use - chat apps and similar - so Electryo can help with risk where conversations happen. You stay in control of what you connect; findings are reported back in Electryo. Gmail can already be connected: Electryo watches new mail, and if you opt in it can label or move flagged messages.
What does Connect hardware mean?
Optional pairing of devices such as cameras and sensors that add physical-world context. Enrollment and reports will surface in the app alongside your other security activity.
Does a safe answer mean it is definitely safe?
It means that of the checks Electryo ran, none raised a problem. That is a strong signal, not a guarantee. Anything asking for a password, a payment, or remote access still deserves caution.
Can a message talk Electryo into clearing it?
It can influence the sentence you read. It cannot rewrite the evidence. Scores are computed from weighted findings; explanations that contradict those findings are discarded and rebuilt.
Is this an antivirus or a browser extension?
Electryo is an everyday security agent. A browser warning can stop a dangerous page before you land on it. Chat, mailbox watching, and optional apps and hardware sit alongside that. It works with antivirus and browsers.
What about attachments and QR codes?
They are part of a check. Macros, HTML, disk images, shortcuts, and OneNote files are named findings. A QR code is opened on our side and judged as the website it actually leads to.
What if I already clicked?
Open If you clicked for the steps that still help - change the password from a device you already have, and check which sessions are signed in. You can also check the SPF and DMARC records on your own domain.
Do you keep what I paste or ask?
Yes, so your history and chats work and so you can return to a verdict later. It is visible only to the account that submitted it.
Check the next one before you click it.
Paste a link, a message, a file or a QR code. A plain answer, with the reason attached.