PhishGuard - Phishing Detection & Awareness Dashboard

🛠️ Tech Stack

Frontend: React.js (with Hooks)
State Management: Redux Toolkit or Context API
Styling: Tailwind CSS or ShadCN UI
Routing: React Router
Form Validation: React Hook Form + Yup
Optional Backend: Firebase / Node.js with Express
APIs:
- VirusTotal API for link analysis
- Dummy JSON APIs or Firestore for storage

🎯 Idea Overview

PhishGuard is a cybersecurity awareness tool focused on phishing detection. It has two main components:

User Dashboard: Employees can upload suspicious links or email screenshots to receive feedback on whether they are potentially phishing attempts.
Admin Panel: Admins can assign quizzes, view individual user submissions, and send awareness material.

It's like a lightweight phishing analysis and reporting tool designed for internal company training.

✅ Key Features

For Users

Upload suspicious email screenshots or paste URLs
Get a phishing risk score (using VirusTotal API or mock scoring)
Take awareness quizzes
View phishing history & risk scores over time

For Admins

Create and assign quizzes
Review employee submissions
View dashboard of employee performance & awareness score
Upload/download phishing training documents (PDF)

🧩 Bonus Features

OAuth with Google (Firebase Auth)
PDF report generation for phishing score summary
Dark mode toggle
Leaderboard for quiz performance
Role-based access control

🧠 Additional Features to Build in PhishGuard

Extend PhishGuard into a full-fledged security awareness tool with these ideas:

🧪 Advanced Link & Email Analysis

Real-time URL threat analysis using VirusTotal scoring breakdown (detected engines, categories, reputation)
Screenshot-to-text phishing scanner using OCR (Tesseract.js)
Validate domains against a whitelist/blacklist maintained by admins
Auto-label known phishing domains using colored badges (red/yellow/green)

📊 Analytics & Reports

Heatmap of phishing attempts by department or user
Track submission patterns over time (daily/weekly/monthly graphs)
Export CSV of all phishing submissions
Risk trend chart for each user over time

📬 Email Simulation & Training

Simulate fake phishing emails (e.g., "HR Notice", "Password Expired") to test employees
Log whether users clicked on the simulated phishing link
Show "Gotcha!" message and provide educational feedback
Track who failed simulations to target future training

📚 Learning Module Enhancements

Interactive awareness lessons (multi-step, with embedded video or questions)
Certificate generation upon quiz completion
Adaptive quiz difficulty based on performance
Flashcards mode for cybersecurity terms

🔐 Security & Access

Admin approval for new users joining the platform
Log login attempts and suspicious behavior
IP logging for phishing submissions (for audit purposes)
Email alert when high-risk submissions are detected

🌍 Organization-Wide Features

Multi-org support (separate dashboards for different companies)
Organization-level phishing score (aggregated average)
Branding options for company-specific dashboards

📱 Progressive Web App (PWA) Mode

Allow employees to use on mobile or desktop
Offline quiz capability with sync when online
Push notifications for new training material

📌 Why Build This?

Phishing is the most common cybersecurity attack vector in companies. This project shows your ability to:

Handle secure user data flow (uploads, validations)
Integrate third-party security APIs
Use role-based UI/UX in React
Build dashboards and analytics features
Promote cybersecurity awareness

Perfect for resumes aimed at companies that value privacy, compliance, and security.