Mail, page, password
Aura remembers the last ten minutes
- A mailAura marks a link in itFine on its own
- A pageyou open that very addressFine on its own
- A passwordyou are about to type itNow it adds up
Aura says so before the password is gone.
Aura, a small genie for your workdayAura, a calm glow for your workday
A second look, right when it counts.
Aura lives on your computer and reads along in your mail, your browser and your files. When something is worth a second look, Aura says so, before you click, type or paste.
- Checked on your computer
- Aura advises, you decide
- E-Mail, Browser and Desktop
- Optional policies for IT
The idea
Most trouble starts with one click that felt fine.
A parcel mail. A sign-in page. A customer message pasted into a chat. Nobody is careless in these moments, they are busy. Aura is there in exactly that minute: quiet, kind and specific.
You work
Aura stays out of the way. No pop-ups for nothing, no scoreboards, no lectures.
Aura notices
A link that leads elsewhere, a page that is not what it says, text with an account number in it. It looks at what is in front of you, and only on your computer.
You decide
Aura tells you what it saw, why it can matter and what would help. Then the call is yours.
Where Aura lives
In your mail, in your browser, on your desktop.
One Aura in three places. Each place sees what the others cannot, and all three ask the same local agent on your computer.
Outlook add-in
In your mail
A pane beside the open message shows what Aura noticed and why. When you write, it looks at the draft before it goes out.
- Sender, links, attachments and pictures with QR codes
- Reporting to IT only when you choose it, after Aura shows what would be sent
- Works in Outlook on the web and new Outlook
Browser extension
In your browser
Aura looks at the page you are on and at what you are about to do on it, in Chrome and Edge.
- Links checked before you follow them
- Sign-in and payment pages, look-alikes and ClickFix instructions
- Text and files on their way to AI tools, webmail and file-sharing sites, with an offer to mask text
- On an AI tool your organisation has not approved: a way to ask IT, or to open the tool it prefers instead
- Downloads checked once they have finished
Menu bar app
On your desktop
A small app in the menu bar is Aura's home. It sees what mail and browser cannot, and it is where you call Aura.
- Files you download or open
- Text you paste, once you have allowed Accessibility
- Network and USB disks, each with its own switch
- AI apps that are not approved, with the same way to ask IT
- macOS first, Windows is being prepared
More places will follow, so Aura is there wherever you work:
- Slack
- Microsoft Teams
- Your phone
Moments
Five moments you will recognise.
The same Aura and the same words it uses on a real screen, whether it speaks from the Outlook add-in, the browser extension or the menu bar app.
Where Aura speaksOutlook add-inIn the add-in's pane beside the open message, with a risk score.
A button that promises a delivery
- What happens
- A parcel mail asks you to confirm your address within a day. The button looks fine.
- What Aura does
- Aura notices that the button leads to another address than the sender's own, and points at it. It suggests opening the parcel service yourself.
- Why it matters
- Mails like this rarely look wrong. They look busy. The address behind the button is the part you cannot see.
Where Aura speaksBrowser extensionIn the card the toolbar icon opens, with a risk score. The icon shows the number.
A page that says Microsoft, but is not
- What happens
- A link brings you to a sign-in page that looks exactly like the one you know.
- What Aura does
- Before you type, Aura compares the address with the brand the page claims to be, and tells you. Leaving the page is one button.
- Why it matters
- A password typed into a look-alike page is hard to take back.
Where Aura speaksBrowser extensionIn a card over the chat page, before the text goes out.
A customer message, about to be shared
- What happens
- You paste a customer's message into an AI chat to get help with the wording.
- What Aura does
- Aura sees a name, an email address and an account number, and offers to swap them for placeholders. The real values stay on your computer.
- Why it matters
- A helpful tool stays helpful when it only gets what it needs. Masking takes one click.
Where Aura speaksMenu bar appFrom the menu bar app, over whatever is in front of you.
A page that asks you to run a command
- What happens
- A "verify you are human" page tells you to open Terminal and paste a line it has copied for you.
- What Aura does
- Aura sees what the page put on your clipboard and speaks up. With one click the clipboard is empty, so pasting does nothing.
- Why it matters
- The trick is called ClickFix. A real human check is a click, never a command.
Where Aura speaksMenu bar appFrom the menu bar app, as soon as the file lands.
An invoice that is really a program
- What happens
- A download called Invoice_2291.pdf.exe lands in your folder.
- What Aura does
- Aura notices a program wearing a document's name. Moving it to the Trash takes two clicks, and it can always be put back.
- Why it matters
- Nothing is deleted for good, and nothing happens without you.
Scenes are staged with sample data.
Aura connects the dots
Alone, each step looks harmless.
Aura does not only judge one mail or one page. It remembers the last ten minutes on this computer, and speaks up when the steps add up.
Page, Terminal
Aura remembers the last ten minutes
- A pagecopies a command for youFine on its own
- Terminalcomes to the frontFine on its own
- A pasteis one keystroke awayNow it adds up
Aura asks you to stop, and offers to clear the clipboard.
Download, open
Aura remembers the last ten minutes
- A downloadfrom a page Aura flaggedFine on its own
- The fileyou open itFine on its own
- A programstartsNow it adds up
Aura links the file back to where it came from.
Aura's ways
A colleague, not a controller.
Aura follows a few simple rules. They are the reason people keep it around, and the reason IT can say yes.
Aura says what it saw
"This page asks for a password and says it's Dropbox, but the address isn't." First an observation, then what it can mean.
One thought at a time
Short, concrete, with a next step. No walls of text, no red alarms.
Aura never blames
No "you should have". When something slipped, Aura stays calm and gives you the steps to contain it.
Advice first, blocking only by choice
By default Aura only tells you what it noticed. Holding something back is a separate setting, and it stays off until you or your organisation switch it on. Then Aura can stop a risky link, a message with sensitive text, a command copied for a terminal, a password sent from a page that looks wrong, or a page that opened from a chat.
Calling Aura
Call Aura, and it points the way.
Press the shortcut anywhere and Aura steps out with four offers: a tip, a check of a file, a look at what you just copied, or a short tour of what it can do.
⌃⌥A
On a Mac. Press it again, or Escape, and Aura goes away.
- A ring shows whereWhen Aura talks about a link or a field, it draws a ring around it, so you never have to hunt for what it means.
- One tip at a timeAsk for a tip and Aura picks one you have not seen yet, on a topic where it helps most. It stays open and shows the tip in the same bubble.
- A look at what you copiedUnsure about something you just copied? Aura reads it once, on your computer, and tells you what it sees.
Learning
Aura teaches the small things, and only when it helps.
After a moment that mattered, or whenever you ask, Aura shares one short thought with a concrete example. Habits grow from small things, not from training days.
- Short and concreteOne habit, one example, one rule of thumb. The kind you remember on a busy Tuesday.
- On the topics you meetTips are picked from what happened to you, so they stay relevant instead of generic.
- Never a scoreboardNo points, no streaks, no leaderboards. Learning is a quiet help, not a game you can lose.
SoSafe Aura
Type the address yourself
If a mail asks you to sign in, open the site by typing its address. That skips any link in the mail.
For example
✗A mail says “Your parcel is waiting, sign in” with a big button.
✓Open a new tab and type the shop's address yourself.
For IT
One place to see and steer.
The console is where IT sees the picture, sets the rules and rolls Aura out. It is optional: without it, every Aura runs on its own.
Insights
See how it is going
Counts per group and day show which topics people meet and how moments end. Small groups are withheld, so nobody can be picked out. Where your organisation uses AI services, IT can also pull sign-ins, usage counts and changes to settings from their admin or compliance APIs. Numbers only, never chats or files.
Policies
Decide what is on
Named policies for groups: what is only advice, what is on, and what is locked. One computer can get an exception that ends by itself. A short acceptable-use note for AI tools is read and confirmed once, and IT decides whether people may approve tools for themselves.
Tools
Know your AI tools
Aura lists the AI tools, apps and browser extensions people use, by name. Approve or block them for everyone, a group or one computer, or mark a tool "ask IT first" and name the approved one to use instead. When someone asks IT to approve a tool, the request waits here.
Deploy
Roll it out with your MDM
Pick a group, make an enrollment token and download the profile for macOS, Windows or Linux. Your MDM or group policy installs it, and policy reaches each computer as a signed bundle.
Alerts go to a webhook, or by email through your own mail relay, when a report, a new tool or a request arrives. Events, devices, tools and the audit log can be downloaded as CSV, and a SIEM can read events through the API.
Screens show sample data.
For IT and security
Built so you can say yes.
Aura is local-first. Everything Aura looks at stays on the computer it runs on, every score can be explained, and nothing happens without the person.
On the device
Mail, page and file content is analysed by a local agent on the same computer. There is no cloud evaluation. Nothing is reported unless the organization turns it on, and then only what it allows: counts, and optionally lessons, warnings and device health, never content. A warning about an unapproved tool may carry the tool's name.
Explained, not guessed
Every score comes from named signals with fixed weights. Aura shows which ones, under "Why Aura sees it this way".
Advice by default
Nothing is blocked or deleted without the person. Holding things back is an optional switch per computer, used only at a moment that cannot be taken back, such as a command pasted into a terminal or a password sent from a page that looks wrong. Everything else Aura sees is advice and counts. An organisation can block named AI websites in an enforced policy; moving a file to the Trash needs two confirmations and is never final.
No content in the log
The log book keeps URLs, hosts, scores and signal names. Never message bodies, page text, images or file names.
Narrow doors
The agent listens on 127.0.0.1 only, over HTTPS. Each paired app has its own token, which can be revoked in the status window.
Sensors with a switch
Desktop sensors for pastes, the network and USB disks can each be switched off. The paste sensor stays off until the person grants Accessibility.
What runs where
What Aura looks at
- Sender identity, SPF, DKIM and DMARC, links and where they lead, attachments, the largest pictures, and the wording itself.
- Pages
- Sign-in and payment forms, brand look-alikes, tech-support lures, and ClickFix instructions.
- Files
- Macros, double extensions, programs, archives with programs inside, and encrypted archives.
- Text going out
- Credentials, customer data, personal data, financial data, contracts and source code, on the way to AI tools, webmail, paste and file-sharing sites and chats.
- AI tools
- Unapproved or blocked AI websites and apps, named in the warning, personal accounts at ChatGPT, Claude and Gemini (only when the organisation lists its work domains), sign-in screens that ask to let an unapproved AI tool into an account with wide access, and MCP servers listed in AI clients' settings.
- Chains
- Mail to page to password, page to Terminal, download to launch: ten minutes of context, no content.
What leaves the computer
- Off
- The default. Nothing leaves the computer and nothing is queued.
- Counts
- Once a day, totals per group by surface and severity. No person, no device, no tool, and shown only for groups above a minimum size (ten by default). A computer counts toward that size only after it has reported on three days.
- Events
- Also each lesson and each warning as it happens, with signal names. A warning about an unapproved tool carries the tool's name, never an address or text. IT sees it under a pseudonym that changes every 90 days.
- Events and health
- Also the state of disk encryption, firewall and Aura's sensors, per computer.
The organisation sets the level in a managed profile, and nothing is sent without it. The status window shows what is sent. An organisation can also choose to record whose computer it is, which is off by default. IT then sees the owner on that one computer's page, never next to events or in a policy.
How policy reaches each computer Optional
- Signed bundles
- Policy reaches each computer as a signed bundle, outbound over one HTTPS address. A computer only accepts bundles signed with a key you trust.
- Locked settings
- Locked settings show as "Set by your organisation" in every Aura. Groups, policies and tools are managed in the console.
- Where Aura works today
- Outlook on the web and new Outlook
- Chrome and Edge
- macOS menu bar
- Windows is being prepared
Questions
What people ask first.
Does Aura send my mail or pages somewhere?
No. Content is analysed by a local agent on your computer. There is no cloud evaluation. Your organisation can switch on reports of counts, lessons and warnings, never content. Until it does, nothing leaves the machine.
Can Aura block or delete things?
By default it only advises. If you switch on "hold back what Aura can stop", it can stop a risky link, a message with sensitive text, a command copied for a terminal (taken off the clipboard, with a way to put it back), a password, card or code sent from a page that looks wrong, or a page that opened from a chat, on that computer. An organisation can also block named AI websites in its policy, and Aura then holds back messages and files sent there. Moving a file to the Trash needs two confirmations and can be undone.
Will my employer see what I do?
The log book stays on your computer and keeps no content. Reporting to your organisation is off until it switches it on, and the status window shows what is sent. See "What leaves the computer" in the security section. If your organisation also records whose computer it is (off by default), IT sees that on the page of that one computer, not next to what Aura noticed.
What if Aura is wrong?
Aura says "worth a second look", not "this is phishing". You can mark a page or a mail as fine, and Aura takes the notice down.
Can IT manage Aura for everyone?
Yes, and it is optional. A central platform with a console gives IT policies, groups, exceptions for single computers, a list of AI tools to approve, block or ask about first (nothing is held back for that), usage numbers from AI services, and alerts. Settings can be locked by the organisation, and policy arrives as a signed bundle. Without it, each Aura runs on its own.
Does Aura nag?
No. Notices that need no answer fade by themselves, teaching happens when you ask or after a moment that mattered, and nobody is scored. A mail or a page gets a risk score, a person never does.
Which apps does Aura work with?
Outlook on the web and new Outlook, Chrome and Edge, and a macOS menu bar app that also watches the desktop. Windows is being prepared.
Is Aura available in German?
Yes. Aura speaks English and German and follows the system language, in the Outlook add-in, the browser extension and the menu bar app, and the console is in both languages too. This page is also available in German.
Aura is small on purpose.
Aura is a quiet companion for the minute before the click. It looks along, so you do not have to look twice.