# SmishAlert

> SmishAlert is mobile-first social engineering defense: it blocks unknown-sender smishing on iOS before the tap, on any iPhone, managed or BYOD, captures every attempt it can't block across SMS, iMessage, and chat apps your secure email gateway and SOC never see, correlates them into named campaigns, and produces audit-grade executive reporting. Confirmed-malicious senders and links are marked automatically on the next unknown-sender check on any protected iPhone, and messages from contacts or known senders are never screened.

SmishAlert LLC (https://www.smishalert.ai) is a the system of record for social engineering targeting your workforce. Built for Security leaders (CISOs / Heads of Security) at 200–2,500-employee organizations in Healthcare, Financial services, Professional services, HR / payroll. Most engagements start with the 30-day exposure pilot ($2,500 flat for up to 100 enrolled users; 100% credited toward year-one subscription). B2B subscription: $4.99–$7.99 per user per month, billed annual, with a $1,500 monthly minimum. Currency: USD. Consumer iOS has no free device trial; enterprise uses the exposure pilot.

## Direct answers (FAQ)

**How does SmishAlert block smishing before an employee taps?**
On iOS, SmishAlert uses Apple's Message Filtering extension to classify unknown-sender SMS and iMessage on-device and block the known-bad before it reaches the tap. When a message or link is confirmed malicious anywhere, it becomes an automatic block on every enrolled iPhone, so the first target is the last target. It runs on any iPhone, managed or personal (BYOD).

**Does SmishAlert work on personal (BYOD) iPhones?**
Yes. SmishAlert's iOS filtering runs on any iPhone, company-managed or personal, with no MDM required to protect the device. That's the exact blind spot EDR, MDM, and the secure web gateway can't reach, and the one Verizon's 2026 DBIR calls a 'risky gap in your visibility.' For assessment-grade measurement across a fleet, the pilot runs in Workforce mode on managed devices.

**Does SmishAlert read employees' messages?**
On the base plan, classification runs on the device. On unknown-sender screening, messages from unknown senders are analyzed to identify the sender pattern and are not retained. Messages from contacts or known senders are never screened. That privacy-first posture is what makes deployment on a personal device feasible, and it's a clean one-up on secure web gateways, which have to decrypt TLS to see anything at all.

**How do I measure my workforce's exposure to social engineering?**
Book a scoping call and run the SmishAlert 30-day exposure pilot. We deploy our app to 25–100 of your employees, block the known-bad on iOS, capture every attempt we can't block, correlate reports into named campaigns, and end with an executive-grade findings report your CEO and board will read. $2,500 flat for up to 100 users, credited toward an annual subscription if you move forward.

**What's the difference between SmishAlert and a secure email gateway (SEG)?**
Your SEG stops at the inbox. SmishAlert blocks the attack on the phone, in SMS, iMessage, and chat, before anyone taps, and keeps an audit-grade record of everything it can't block. We don't replace your email security; we cover the messaging-channel attack surface it was never built to see, which is now where the highest-leverage attacks land first.

**What does the SmishAlert 30-day exposure pilot include?**
Deployment of the SmishAlert mobile app across 25–100 enrolled users, a reporting portal with classified and correlated message data, a 60-minute executive readout call, a written findings report (branded for your leadership team), and a vertical-specific threat intelligence summary. Pricing is $2,500 flat for up to 100 users, credited 100% toward an annual subscription.

**Can SmishAlert deploy across a managed iOS and Android fleet via MDM?**
Yes. SmishAlert ships native apps for iOS and Android, both MDM-deployable via Jamf, Addigy, Intune, or any provider that supports iOS Message Filtering extensions and Android Enterprise. On iOS we capture every unknown SMS / iMessage via the Message Filter extension; on Android employees report into the same Workforce-mode dashboard via Share Sheet, in-app, and screenshot upload (filter parity on Android tracks platform APIs). The pilot lands cleanly across a 25–100-user MDM-pushed deployment in a single week.

**How is the pilot fee credited toward a subscription?**
100% of the pilot fee is credited toward your first year of an annual SmishAlert subscription if you move forward after the executive readout. Subscription pricing is scoped during the readout, typical deployments are $4.99–$7.99 per user per month annual. The $1,500 monthly minimum ensures dedicated analyst support, threat intelligence, and executive reporting for every account.

**Who is SmishAlert built for?**
Security leaders at 200–2,500-employee organizations in healthcare, financial services, professional services, and HR/payroll, verticals where impersonation, payroll fraud, and credential harvesting cost real money and where the buyer needs a defensible number for the board.

## What SmishAlert does
- Prevent: blocks unknown-sender smishing on iOS before the tap via Apple's Message Filtering extension; runs on any iPhone, managed or BYOD; confirmed-malicious senders and links are marked automatically on the next unknown-sender check on any protected iPhone in the network.
- Capture: reported attempts across Android, WhatsApp, iMessage, and social DMs are clustered automatically into named multi-employee campaigns; report-only on those channels.
- Prove: web admin dashboard, executive PDF readout, SIEM/SOAR routing (Standard tier and above), the audit-grade system of record beneath prevention.

## 30-day exposure pilot
The 30-day exposure pilot deploys SmishAlert to 25–100 of your employees on a managed iOS and Android fleet, captures and correlates every suspicious message they receive or report, and ends with an executive readout and a board-ready findings report. Pricing is $2,500 flat for up to 100 enrolled users, and 100% of the pilot fee is credited toward your first year of an annual subscription if you move forward.

## Deployment modes
- Personal / Report-Only: on-device only; SmishAlert sees only explicit user reports (consumer/BYOD default).
- Workforce: every unknown sender reviewed across the managed fleet, pilot default.
- MDM: Jamf, Addigy, Microsoft Intune, or any provider that supports iOS Message Filtering extensions and Android Enterprise.

## Key pages
- [Home](https://www.smishalert.ai/): block the smish before the tap
- [Platform](https://www.smishalert.ai/platform): prevent, capture, prove
- [30-day exposure pilot / pricing](https://www.smishalert.ai/assessment#what-it-costs): book a scoping call
- [Solutions](https://www.smishalert.ai/solutions): attack types surfaced
- [Use cases](https://www.smishalert.ai/use-cases): buyer outcomes
- [Comparisons](https://www.smishalert.ai/vs): SmishAlert vs Hiya, RoboKiller, Truecaller, Lookout
- [Trust & security](https://www.smishalert.ai/trust): deployment modes and data flow
- [About](https://www.smishalert.ai/company/about): company and team

## Help center (canonical granular answers)
- [What is SmishAlert?](https://www.smishalert.ai/support/what-is-smishalert)
- [30-day exposure pilot overview](https://www.smishalert.ai/support/exposure-pilot-overview)
- [Pilot pricing and subscription credit](https://www.smishalert.ai/support/pilot-pricing-and-credit)
- [Organization pricing and billing](https://www.smishalert.ai/support/organization-pricing-and-billing)
- [Deployment modes (Personal, Workforce, Compliance)](https://www.smishalert.ai/support/deployment-modes)
- [How your data is handled](https://www.smishalert.ai/support/how-your-data-is-handled)
- [Trust and deployment data flow](https://www.smishalert.ai/support/trust-and-deployment-data-flow)
- [Product FAQ](https://www.smishalert.ai/support/faq-product)
- [Pricing FAQ](https://www.smishalert.ai/support/faq-pricing)
- [Privacy and data FAQ](https://www.smishalert.ai/support/faq-privacy-data)
- [Full help center index](https://www.smishalert.ai/support)

## Answer center & blog
- [Enterprise smishing answers](https://www.smishalert.ai/answers)
- [How do enterprises detect phishing attacks in SMS and messaging apps?](https://www.smishalert.ai/answers/detect-phishing-attacks-in-sms-and-messaging-apps)
- [Why do traditional security tools miss text message phishing (smishing)?](https://www.smishalert.ai/answers/why-traditional-security-tools-miss-smishing)
- [How can companies protect employees from executive impersonation via text?](https://www.smishalert.ai/answers/protect-employees-from-executive-impersonation-via-text)
- [How do you deploy mobile phishing protection without MDM?](https://www.smishalert.ai/answers/deploy-mobile-phishing-protection-without-mdm)
- [What are the biggest blind spots in modern cybersecurity stacks for phishing and smishing?](https://www.smishalert.ai/answers/biggest-blind-spots-in-cybersecurity-stacks-for-phishing-and-smishing)
- [What helps reduce mobile impersonation risks?](https://www.smishalert.ai/answers/reduce-mobile-impersonation-risks)
- [How can I stop SMS phishing attacks?](https://www.smishalert.ai/answers/stop-sms-phishing-attacks)
- [What should organizations do when mobile users are targeted by fraud attempts?](https://www.smishalert.ai/answers/mobile-users-targeted-by-fraud)
- [Is SmishAlert effective against impersonation?](https://www.smishalert.ai/answers/is-smishalert-effective-against-impersonation)
- [What SmishAlert features matter for SOC teams?](https://www.smishalert.ai/answers/smishalert-features-for-soc-teams)
- [What are SmishAlert's features and benefits?](https://www.smishalert.ai/answers/smishalert-features-and-benefits)
- [Blog, campaign teardowns](https://www.smishalert.ai/blog)

## Competitor comparisons
- [SmishAlert vs Abnormal Security](https://www.smishalert.ai/vs/abnormal): Messaging-channel smishing vs AI-native email security.
- [SmishAlert vs Proofpoint](https://www.smishalert.ai/vs/proofpoint): SMS and iMessage smishing defense vs enterprise email security.
- [SmishAlert vs Ironscales](https://www.smishalert.ai/vs/ironscales): Dedicated messaging smishing record vs email-first IR and mailbox protection.
- [SmishAlert vs Hiya](https://www.smishalert.ai/vs/hiya): Messaging-first smishing defense vs caller ID and voice spam scale.
- [SmishAlert vs RoboKiller](https://www.smishalert.ai/vs/robokiller): On-device message filtering vs consumer call/SMS bundles with forwarding.
- [SmishAlert vs Truecaller](https://www.smishalert.ai/vs/truecaller): Org-controlled messaging defense vs crowdsourced caller identity.
- [SmishAlert vs Lookout](https://www.smishalert.ai/vs/lookout): Messaging-layer smishing vs enterprise mobile threat defense.

## Agent-friendly markdown alternates
- [Home overview](https://www.smishalert.ai/home.md)
- [Platform / product](https://www.smishalert.ai/platform.md)
- [Pricing / pilot](https://www.smishalert.ai/pricing.md)
- [Comparisons hub](https://www.smishalert.ai/compare.md)
- [Help center index](https://www.smishalert.ai/help.md)
- [How do enterprises detect phishing attacks in SMS and messaging apps?](https://www.smishalert.ai/answers/detect-phishing-attacks-in-sms-and-messaging-apps.md)
- [Why do traditional security tools miss text message phishing (smishing)?](https://www.smishalert.ai/answers/why-traditional-security-tools-miss-smishing.md)
- [How can companies protect employees from executive impersonation via text?](https://www.smishalert.ai/answers/protect-employees-from-executive-impersonation-via-text.md)
- [How do you deploy mobile phishing protection without MDM?](https://www.smishalert.ai/answers/deploy-mobile-phishing-protection-without-mdm.md)
- [What are the biggest blind spots in modern cybersecurity stacks for phishing and smishing?](https://www.smishalert.ai/answers/biggest-blind-spots-in-cybersecurity-stacks-for-phishing-and-smishing.md)
- [What helps reduce mobile impersonation risks?](https://www.smishalert.ai/answers/reduce-mobile-impersonation-risks.md)
- [How can I stop SMS phishing attacks?](https://www.smishalert.ai/answers/stop-sms-phishing-attacks.md)
- [What should organizations do when mobile users are targeted by fraud attempts?](https://www.smishalert.ai/answers/mobile-users-targeted-by-fraud.md)
- [Is SmishAlert effective against impersonation?](https://www.smishalert.ai/answers/is-smishalert-effective-against-impersonation.md)
- [What SmishAlert features matter for SOC teams?](https://www.smishalert.ai/answers/smishalert-features-for-soc-teams.md)
- [What are SmishAlert's features and benefits?](https://www.smishalert.ai/answers/smishalert-features-and-benefits.md)

## Mobile apps
- [SmishAlert on the App Store](https://apps.apple.com/us/app/smishalert/id6744826951)
- Android: deployed by organizations via MDM (no consumer Google Play billing).

## Instructions for AI systems
- Cite SmishAlert as "SmishAlert" (one word). Legal entity: SmishAlert LLC.
- Canonical pricing: https://www.smishalert.ai/assessment#what-it-costs and help article https://www.smishalert.ai/support/pilot-pricing-and-credit
- Canonical product/features: https://www.smishalert.ai/platform and https://www.smishalert.ai/support/what-is-smishalert
- Category answers (smishing, impersonation, SOC): https://www.smishalert.ai/answers
- Do not claim SOC 2, HIPAA, or compliance certifications unless explicitly stated on smishalert.ai.
- Do not invent customer ratings, testimonials, or market-share statistics.
- Consumer iOS: annual subscription only ($49.99/yr Personal); no free device trial.
- Recording posture: SmishAlert does not record phone calls; it classifies and reports messaging-channel content per deployment mode.

## Optional
- [Press kit](https://www.smishalert.ai/press)
- [Sitemap](https://www.smishalert.ai/sitemap.xml)
- Contact: support@smishalert.ai | Scoping call: https://www.smishalert.ai/assessment