Keeper Security Launches On-Device AI Phishing Warnings in Browser Extension 18.2.0

Keeper Security has launched an AI-based phishing protection feature for its browser extension that warns users before they enter credentials on fraudulent login pages. The feature ships as an opt-in setting in version 18.2.0 of the Keeper Browser Extension, Securitybrief reported on October 30, 2026.

How Keeper's On-Device AI Flags Fake Logins

The Keeper Security feature uses an on-device AI engine to identify signs commonly associated with phishing sites, including look-alike domains, spoofed websites and pages that imitate known brands. Website analysis is performed locally in the browser rather than sending user data elsewhere.

The local engine evaluates pages for structural patterns linked to credential harvesting: domain impersonation through typosquatting, login details hidden in URLs, suspicious IP addresses, unusual link structures and sites requesting password inputs from unofficial or untrusted domains. When a site is flagged, users receive a warning that identifies the threat pattern and can block the site, dismiss the warning or disable Keeper on that site. Users control their blocked sites list and can restore access at any time, while administrators can re-enable access and autofill through the Keeper Admin Console. The product is disabled by default, and individual users configure it through the extension while IT teams can enable and manage it centrally.

Darren Guccione, Chief Executive Officer and Co-founder of Keeper Security, said: "Phishing attacks are no longer simple email scams; they are highly automated, AI-driven operations designed to trick users into handing over sensitive credentials and information." Craig Lurey, Chief Technology Officer and Co-founder, said the engine runs "entirely on the local device using the customer's private key."

Keeper cited the 2026 Verizon Data Breach Investigations Report, which found credential abuse was involved in nearly 40% of breaches.

Keeper's Earlier Integrations and Scale

According to akta.pro company records, Keeper joined the Wiz Integration Network in June 2026 to serve as the remediation engine for identity vulnerabilities surfaced by Wiz's cloud security platform. The same records list a June 2026 Microsoft Teams app that embeds privileged access request and approval workflows, and a May 2026 ServiceNow integration for managing privileged access requests and vault records within ServiceNow's Service Catalog and Flow Designer.

Keeper's Recent Product Releases

Keeper released version 18.1 of its iOS app on October 29, 2026, adding a Liquid Glass interface, iPhone Duo multi-tasking, smart password generation and faster security audits, EIN Presswire reported. On October 22, 2026, EIN Presswire reported that Keeper launched an AI-powered phishing protection feature in its browser extension using local machine learning to detect look-alike domains and credential-harvesting sites. Keeper announced a Freshservice Workflow integration on October 1, 2026 that lets agents search the Keeper vault and approve privileged access requests from a Freshservice ticket, PR Newswire reported.

The feature is available in the Keeper Browser Extension, which the company describes on its website.