Product
Grizzly Feed
Phishing pages Grizzly found on its own, within minutes of going live.
4 in 5 of the pages we find are not in Google Web Risk when we find them.
{
"scan_id": "4a7432e6-…",
"url": "https://makro-login.example/signin",
"host": "makro-login.example",
"classification": "suspicious",
"target_brand": "Makro",
"page_intention": "credential_collection",
"first_seen": "2026-10-01T15:50:52Z",
"scan_url": "https://www.grizzlysec.com/scan/4a7432e6-…",
"screenshot_url": "https://api.grizzlysec.com/scan/4a7432e6-…/screenshot"
}Grizzly Scan
Give Grizzly a URL and get a verdict, the brand impersonated, and what the page is after.
From your code
One call, one JSON verdict, with a screenshot and a permanent result page. 100 scans a day per key, free with an account.
POST https://api.grizzlysec.com/scan
Authorization: Bearer gk_live_...
Content-Type: application/json
{ "url": "https://paypal-verify.example/signin" }{
"classification": "phish",
"target_brand": "PayPal",
"page_intention": "credential_collection",
"scan_id": "3f9c2a1e-7b4d-4e8a-9c21-5d0f6a8b1c33"
}Plans
Your plan decides what happens to your scans and how you get the feed.
Free
- Your scans
- Your scans are public and appear in the feed.
- Grizzly Feed
- Browse the feed on the site.
- Grizzly Scan
- Scan API, 100 scans a day.
Team
- Your scans
- Your scans are unlisted.
- Only a sanitized host and verdict go to the feed: no query strings, no scan link, no screenshot, no attribution.
- Grizzly Feed
- Full Feed API.
- Grizzly Scan
- Scan API with a higher scan quota.
Private
- Your scans
- Your scans are private. Nothing leaves.
- Grizzly Feed
- Full Feed API.
- Grizzly Scan
- Scan API with a higher scan quota.