Web Risk
Protecting users from unsafe websites
Web Risk is a Google Cloud service that helps protect users from unsafe websites. It does this by checking URLs against Google's large and constantly updated lists of known dangerous sites. These include phishing sites, sites with malware, and sites that spread unwanted software. By using Web Risk, websites and applications can warn users about these dangerous links, prevent them from clicking on them, and stop the spread of harmful content.
Features
Comprehensive threat detection
Analyzes billions of URLs daily, maintaining a database of over a million known unsafe URLs, including phishing sites, malware hosts, and sites distributing unwanted software.
Brand protection
Monitors the web for unauthorized use of a brand's assets and alerts the brand owner so they can take action to protect their reputation.
High accuracy
Offers high verdict accuracy with low false-positive rates, ensuring reliable threat detection without unnecessarily flagging legitimate websites.
Powered by Google
Uses the same proven technology that powers Google Safe Browsing, protecting over 4 billion devices worldwide.
Real-time protection
Provides up-to-date protection by constantly updating its threat list, ensuring users are safeguarded against the latest threats.
Flexible API
Offers a flexible API that allows developers to integrate its threat detection capabilities into their applications and platforms seamlessly.
How It Works
Learn how Web Risk protects users from unsafe websites.
Learn how Web Risk protects users from unsafe websites.
Common Uses
Safe browsing integration
Web Risk's API can be easily integrated into browsers, extensions, and security software to provide real-time protection against malicious websites, warning users before they access potentially harmful content.
Learning resources
Web Risk's API can be easily integrated into browsers, extensions, and security software to provide real-time protection against malicious websites, warning users before they access potentially harmful content.
URL filtering in firewalls
Businesses can utilize Web Risk to enhance their firewall capabilities by filtering URLs based on Web Risk's threat intelligence, blocking access to known malicious websites and protecting their internal networks.
Learning resources
Businesses can utilize Web Risk to enhance their firewall capabilities by filtering URLs based on Web Risk's threat intelligence, blocking access to known malicious websites and protecting their internal networks.
Protecting email services
Email providers can use Web Risk to scan URLs embedded in emails for potential threats, preventing phishing attacks and malware distribution through email links.
Learning resources
Email providers can use Web Risk to scan URLs embedded in emails for potential threats, preventing phishing attacks and malware distribution through email links.
Content moderation
Social media platforms and online communities can leverage Web Risk to identify and remove harmful content, such as posts containing links to phishing sites or malware.
Learning resources
Social media platforms and online communities can leverage Web Risk to identify and remove harmful content, such as posts containing links to phishing sites or malware.
Protecting online advertising
Advertising platforms can use Web Risk to scan URLs in advertisements, ensuring that ads do not lead users to unsafe websites and protecting the platform's reputation.
Learning resources
Advertising platforms can use Web Risk to scan URLs in advertisements, ensuring that ads do not lead users to unsafe websites and protecting the platform's reputation.
Pricing
| Web Risk pricing | Price by monthly usage for Lookup, Update, and Submission APIs. | |||
|---|---|---|---|---|
| API features | Call type | 1 to 100,000 calls/month | 100,001 to 10,000,000 calls/month | 10,000,001+ calls/month |
Lookup API | uris.search | No cost | $0.50 per 1,000 URLs | |
Lookup and Update API | hashes.search | $50 per 1,000 calls | ||
threatLists.computeDiff to update your local database | Free | |||
Update API | hashes.search to confirm threats | $50 per 1,000 calls | ||
threatLists.computeDiff to update your local database | Free | |||
Call type | 1 to 100 submissions a month | 101 to 200 submissions a month | More than 200 submissions a month | |
Submission API | uris.submit | Free | $2 per call | |
For more detailed pricing information, please view the pricing guide.
Web Risk pricing
Price by monthly usage for Lookup, Update, and Submission APIs.
Lookup API
uris.search
No cost
$0.50 per 1,000 URLs
Lookup and Update API
hashes.search
$50 per 1,000 calls
threatLists.computeDiff to update your local database
Free
Update API
hashes.search to confirm threats
$50 per 1,000 calls
threatLists.computeDiff to update your local database
Free
Call type
1 to 100 submissions a month
101 to 200 submissions a month
More than 200 submissions a month
Submission API
uris.submit
Free
$2 per call
For more detailed pricing information, please view the pricing guide.
Free usage
Flexible API options
Best practices for using the Lookup and Update API
Best practices for using the Submission API
The Lookup API lets your client applications check if a URL is included on any of the Web Risk lists.
The Update API lets your client applications download hashed versions of the Web Risk lists for storage in a local or in-memory database.
The Web Risk Submission API validates that the submitted URLs render content violating Safe Browsing policies.
Business Case
Reddit uses Web Risk to protect users against phishing, malware, and social engineering
"Since deploying Web Risk, we have been able to take down tens of thousands of posts that contained harmful URLs. Additionally, we have been able to proactively identify tens of thousands of malicious links that would have otherwise been published on our platform, potentially harming our users."
Spencer Koch, Principal Security Engineer, Reddit
Read the blogFeatured benefits
Real-time identification of unsafe URLs.
High-volume scanning.
Nuanced response with risk scoring.
FAQ
What is Web Risk?
Web Risk is a Google Cloud service that helps protect users from unsafe websites by checking URLs against Google's constantly updated list of known threats like phishing, malware, and unwanted software.
How does Web Risk work?
Web Risk uses a variety of technologies, including machine learning and human review, to identify and categorize unsafe URLs. It then provides APIs that developers can use to check URLs in their applications and websites.
What are the benefits of using Web Risk?
- Enhanced security: Protect your users from phishing, malware, and other online threats.
- Improved user experience: Warn users before they click on dangerous links, and prevent them from posting links to known unsafe websites.
- Real-time protection: Stay up-to-date with the latest threats, thanks to Google's constantly updated list of unsafe URLs.
- Easy integration: Web Risk APIs are easy to use and can be integrated into a variety of applications and websites.
How can I get started with Web Risk?
To get started with Web Risk, create a Google Cloud Project and enable the Web Risk API. You can then use the API to check URLs in your applications and websites.
Is Web Risk free?
Web Risk offers a free tier for low-volume usage. For higher volumes, you can choose a paid plan that best suits your needs.
What types of threats does Web Risk protect against?
Web Risk protects against a wide range of online threats, including phishing, malware, unwanted software, and social engineering.
Does Web Risk collect any personally identifiable information (PII)?
Web Risk does not collect any PII. The URLs that are checked are hashed before they are sent to Google, so your users' privacy is protected.
Can I use Web Risk to scan my own website?
Yes, you can use Web Risk to scan your own website for unsafe URLs. This can help you identify and fix any vulnerabilities that could be exploited by attackers.
