What Jatzo can help with, what the results mean and how your information is handled.
Identity, authentication, intent, social-engineering behaviour, links, supported attachments, routing evidence and campaign context are combined into one explainable assessment.
See the investigation guideYour privacy matters. Jatzo processes the raw email and its attachments for the analysis, then releases them from application processing; it does not save the raw message or attachment contents in case history. History does keep your email subject as the case title, the date, score and compact findings. Subjects can contain personal information. Temporary URL intelligence and keyed fingerprints are explained in our Privacy Notice.
Read PrivacyFree covers occasional checks on the website. Personal puts Jatzo inside Outlook and adds the full evidence: links, attachments, technical detail, source IP, live link reputation and PDF reports. Business covers a team, with a login for each person and one allowance shared by everyone. Business Pro adds the Training Centre for everyone you add and bulk checking on the website. Every plan runs the same detection engine.
Compare plansFew warning signs found. Still verify unexpected requests involving money or passwords.
Pause and check the details through a contact method you already trust.
Do not follow the email’s instructions. Verify independently or ask your IT team.
In Outlook, yes, on Personal and above. Jatzo adds a Check this email button and the message is checked by the same engine as the website. Gmail is not available. A Gmail add-on can only reach an account through a Google Workspace Marketplace listing, and Jatzo's listing is not approved, so it cannot be installed. On Gmail, and on Free, upload the .eml file or paste the original email source on the website.
Paid plans can request a PDF, or a JPTI report, to their registered account address when secure email delivery is enabled by the operator. You cannot enter another recipient. In a business team, Report this to IT sends the report to the IT email address the workspace owner set instead, and that report names the original sender and the subject. A request accepted for delivery can still be delayed or filtered by your mail provider.
Jatzo combines more than one hundred explainable checks across sender identity, From/Reply-To/Return-Path relationships, SPF/DKIM/DMARC evidence, source routing, message intent, social-engineering behaviour, impersonation, link structure, attachments and campaign context. Signals are grouped and deduplicated so repeated evidence does not simply inflate the score. A pass written in an uploaded email header is not independently verified by Jatzo. It is not proof of who sent the message and does not cancel independent warning signs.
Verified brand-domain families, a broad identity watchlist and generic organisation checks are combined with lookalike domains, Unicode/confusable characters, suspicious subdomains, machine-like sender infrastructure and identity-coherence checks. The engine asks whether the displayed identity, sender address, Reply-To, Return-Path, sending domain and destinations make sense together. A watchlist match or unusual domain alone is supporting context, not automatic proof of phishing.
Eligible plans can inspect destination-domain evidence and statically profile attachments without executing them. Jatzo checks file signatures and extension mismatches, archives, Office macro indicators, external relationships, active PDF features, HTML smuggling markers, nested emails and URLs exposed inside supported files. Personal and above add live link reputation and further infrastructure context.
Yes, but cautiously. Threat Memory can use explicitly confirmed malicious reports as supporting evidence in later checks. Campaign Intelligence on the paid plans connects related reports using keyed fingerprints within the personal account or business workspace. Jatzo never compares one customer's mail with another's. Jatzo does not expose another user's raw email or automatically treat its own previous High risk verdicts as ground truth.
Email investigation is the first live tool, not the intended limit of Jatzo. The broader direction is an approachable online-security toolbox, with planned capabilities such as isolated visual investigation of suspicious destinations.
Supported file parsing runs in a restricted disposable worker. The website still handles uploads and results, and isolation cannot eliminate every security risk. It does not make an attachment safe to open on your own device.
Yes. The first lesson of Phishing fundamentals is free. Every module is included with Business Pro; buying the catalogue on its own is not enabled yet. A completion record is not an accredited qualification.
HTTP does not encrypt the connection if used as written. This is a separate warning from the phishing score. Avoid entering private information on an HTTP page. HTTPS is useful protection, but it does not prove a website is genuine.
Bulk checking is part of Business Pro and above, up to 50 per batch. Jatzo processes files in sequence and each successful check uses your allowance. Business Pro keeps up to 500 cases, Business 250 and Personal 60.
Yes. Personal and above read QR codes out of attached and inline images, inside the same isolated container that handles every attachment, and check where the code leads exactly as they would a link you could click. The result says the destination came from a code, so you know what you are looking at, and it says so plainly when a code is the only way to act on a message, which is how this kind of attack is usually built. Paid plans also check the destination against Google Web Risk when it is enabled. Two limits worth knowing: codes inside PDFs are not read yet, and neither are images the message only links to rather than attaches. A code Jatzo could not read is not the same as a code that is safe.
Free accounts include clearly labelled ad space. This build uses a Jatzo training promotion without third-party advertising trackers. Personal and above are ad-free.
Business and Business Pro provide a workspace with separate logins and one allowance shared by the team. The owner and administrators invite colleagues and can see all retained business cases; members can open their own. An account in a team is a business account, so every check it makes goes to the team. Never share passwords.
Detailed evidence is temporary for up to 30 minutes and can disappear sooner after a restart or memory limit. The saved case summary remains within your history limit. JPTI exports need their temporary provider evidence. Download important reports promptly; the Case ID links them to your history.
Every current guide has Beginner friendly and Advanced detail views. Switch views within the same guide to get the explanation you need.
An account that belongs to a business workspace is a business account. Every check it makes, on the website or in an inbox, is saved to the workspace, and it has no personal history or personal allowance while it is a member. Joining or creating a workspace deletes the checks already saved to that account, and Jatzo says so before you go ahead; to keep them, use a different email address for the team. For personal checks, use a separate account with a personal email address. Leaving or being removed from a workspace does not restore Free checks to that address.
