Web Risk

Detect malicious URLs on your website and in client applications.

Overview

Web Risk is a Google Cloud service that lets client applications check URLs against Google's constantly updated lists of unsafe web resources. Unsafe web resources include social engineering sites—such as phishing and deceptive sites—and sites that host malware or unwanted software. With the Web Risk, you can quickly identify known bad sites, warn users before they click infected links, and prevent users from posting links to known infected pages from your site. Web Risk includes data on more than a million unsafe URLs and stays up to date by examining billions of URLs each day.

What's new

Industry News

Web Risk for enterprises data sheet

Learn more

Keep your users safe

Your users are critical to your business, and you need security controls to keep them—and your business—safe. With Web Risk, you can stop users from posting infected URLs to your site and sharing malicious links through your platform and warn your users before they visit sites that are known to be unsafe.

Take advantage of Google's web reach

Google Cloud user protection technology is built from years of Google's experience keeping users safe on the web. Google maintains constantly updated lists of unsafe web resources, which can now be used by enterprises to help keep risky URLs off their sites and help users stay protected.

Easily integrate Google Cloud web risk technology into your apps

As a flexible API-based service, Web Risk can be used to determine if unsafe URLs are present on websites or applications that are hosted in the cloud or on-premises.

Watch Web Risk in action

How can you tell if a URL is safe?

With phishing and malware more prevalent than ever, how do you know which links are safe? Luckily, Web Risk contains a fully managed database of URL threats so you can check if a URL is safe from threats. Watch to learn how you can use Web Risk to protect yourself and your users.

How Web Risk works to stop unknown and unsafe URLs

Features

Comprehensive list of known unsafe URLs

Take advantage of Google's constantly updated lists of unsafe web resources to identify phishing and deceptive sites, as well as sites that host malware or unwanted software.

Application agnostic

Web Risk can be integrated into both cloud-based and on-premises hosted applications and websites.

Lookup API

The lookup API allows your client applications to send requests to check if posted URLs are included on any of the known unsafe lists. If a known bad URL is found, it will be flagged and returned.

Update API

Use the update API to download hashed versions of the unsafe lists for storage in a local database. If a match is found in the local database, the client can send a verification request to Web Risk servers to confirm the URL is present on the unsafe lists.

PRICE PER 1,000 CALLS, BY MONTHLY USAGE
API	CALL TYPE	1–100,000 CALLS/MONTH	100,001–10,000,000 CALLS/MONTH	10,000,000+ CALLS/MONTH
Lookup API	uris.search	No cost	$0.50 per 1,000 URLs	Contact sales
Update API	hashes.search	$50 per 1,000	Contact sales	Contact sales