Digital safety for your whole family.
Officer MAGI checks every link, QR code and app — before you tap. Free on-device protection, opt-in cloud analysis, and Family Guardian for the people scammers target most.
Use the same account as the Parakh app. New here? Get the app — a free 30-day demo is built in.
Simple, honest pricing
One plan. Everything in it.
Start free for 30 days. You subscribe here on the web — your plan then unlocks automatically in the app. Cancel anytime · 30-day full refund.
Prices shown in USD, inclusive of applicable taxes.Prices shown in INR, GST included. One licence covers one phone; add phones to a Circle to look after them together.
Questions, answered
Yes — core on-device protection is free for 30 days, then a low yearly price. You can keep using the free basics; the paid plan adds cloud analysis, Family Guardian and shared Circles. There is one plan and it has everything.
You sign in here, pick a plan and pay securely on parakh.magensec.app. Your plan then unlocks automatically in the app for your account — there’s nothing to buy inside the app. Subscribing on the web keeps checkout simple and your payment with our own trusted processors.
Yes. Cancel yourself from this page within 30 days of purchase for a full refund; after that your plan simply runs to the end of its term.
The free checks run entirely on your device — those links never leave your phone. Cloud analysis and Family Guardian are opt-in. We don’t sell data or show ads. See our Privacy Policy.
No — free on-device protection works without signing in. An account is needed only for Family Circle, Family Guardian and purchases.
Back to home · Help · Privacy · Terms
—
Loading your protection…
One licence per phone. A phone inside a Circle is covered by that Circle; the rest carry their own.
A Circle is how you watch over people — parents, children, friends. Invite them, see their posture, keep their seats.
Every person you bring in gets a longer run at Parakh, and so do you.
—
Your receipts. Have a coupon, activation key or Circle invite? Use Use a code at the top of the page.
Renewal reminders, weekly summaries and protection alerts. Turning these off never affects your protection, and you will still get invoices and licence keys — those are records, not reminders.
Permanently delete your account and its data — your profile, devices, Circles you own, licences and credits. This is immediate and cannot be undone. Members of Circles you own keep their own device licences. See what’s removed vs kept on the account-deletion page.
Admin console
Classification Rules
The lists every phone classifies with. Publishing here reaches devices within the hour — no app release, no Play rollout. Lists only. The logic that reads them stays in the app, because a bad hostname affects one check while a bad rule would affect every check with no way to roll it back.
Rule Weights
What each finding contributes to a message's score. 60 and above reads as a scam; 25 and above as “be careful”. Lower a weight when a rule is over-firing on real messages; raise it when a campaign is slipping through. Changes here reach phones within the hour — the rules themselves still need a release.
Omit a section to keep the built-in list. An empty list is rejected: it would read as “match nothing” and silently switch a check off. A domain under trustedFinanceDomains stops us warning about links to it, so only registrable domains are accepted there.
Published History
Every bundle that has been live, newest first. Reverting goes all the way back to the app’s own lists — which throws away every good edit made since the last release along with the bad one. Restoring puts one earlier bundle back, as a new version, so phones that already fetched the bad one still notice the change.
Learned Shorteners
Hosts we have watched behaving like link shorteners. Listing one means “unwrap before judging” — the verdict lands on where the link goes, not on the host itself. That is exactly why approving is a human decision: a redirector an attacker controls would be asking for the right to be judged on somebody else’s domain. A candidate is only offered once it fans out to several unrelated sites and the domain is old enough to have a history.
Upload the file here and pick it in a lesson. There is no URL to type anywhere — a typed address cannot answer the three questions worth asking before deleting something: what uses it, what breaks, and how long and how big is it. Length and size are measured from the real file in your browser, because a length longer than the clip makes the lesson impossible to finish and nothing anywhere reports it.
Files In Storage That The Library Does Not Know About
These clips are already uploaded and already playing — every one the deploy script pushed to train/ predates this library, so nothing here knows their length or which lessons use them. Add to library takes over the file where it is: no re-upload, no new copy, nothing moves. After that it can be picked in a lesson, renamed, and checked before deleting. You must give the length in seconds, because a clip of unknown length can never finish watching and the lesson holding it could never be completed.
A lesson is a video (or nothing to download) plus one question; a course is an ordered list of them, and the order is the curriculum. Edits are drafts and reach nobody. Publishing validates the whole catalogue first: a course naming a deleted lesson is refused, because it would silently get shorter and quietly change what “finished” means for everyone part-way through.
Every Lesson
One lesson can sit in several courses — that is the point of a course. This is the whole set, including any that no course lists yet. A lesson nothing lists reaches nobody.
A phone re-reads the catalogue only when the version rises, and only on its once-a-day check-in — so a publish is normally seen the next morning, not immediately.
Edits here are drafts and reach nobody. Publish is the only step a phone sees. The banner below is what phones actually hold — this screen used to show only the draft table, so it said “no cards” while fourteen were live, and one publish would have replaced all of them.
Sources worth citing: Sanchar Saathi / Chakshu · cybercrime.gov.in (I4C) · RBI · CERT-In. A card that cites a government source is the one people forward to their parents.
Usage against the free-tier caps. Presented as headroom rather than consumption because the decision this drives is “when do we have to start paying”, not “how busy were we”.
Twenty-one jobs run on a timer, each isolated so one failure cannot stop the rest. That isolation is why a job can fail every night without anyone noticing — the only symptom is a screen quietly serving stale numbers. This is the record that it ran, and it is how site-digest was caught failing on every run it had ever had.
The nightly job only ever cooks yesterday, so a bug in the cook stays frozen into every row it already wrote. CloudChecks and CloudBlocks read zero for the life of the product — wrong database, wrong key type, and a helper that swallowed both. This re-derives those two columns from inputs still on disk. It deliberately leaves the phone columns alone: those are differences between two nights of a counter whose past values are gone, so “recomputing” them would invent a spike rather than recover a fact.
Repairing a page you cannot open is a guess. The link opens exactly what the public sees, so the fix can be checked rather than assumed.
Rebuilds the known-bad host table from the public feeds and republishes /intel/hosts.txt, the list every device downloads. Runs nightly on its own — use this after a feed outage or a fresh deploy.
Real hardware reported by the app (model, OS, app version, country). Anonymous device identities live under Users › Anonymous devices.
Create a Code
- Individual coupon (plan = Guard / Guard+) — anyone redeems it to add days to their own license. Shareable; set Max uses above 1 for a promo.
- Circle coupon (plan = Family or Business Circle) — owner-only: the first redeem creates the redeemer's Circle (they become owner); later redeems extend it. Family = 5 seats, Business = 10. Shareable promo many owners can each apply to their own Circle.
- Activation key — a single-use key bundled with a purchase or gift.
Members don't use coupons — a Circle owner invites them from the app (Circles tab), and the member joins with that invite code.
Issued Codes
Renewals & Retention
Everyone who could renew or convert — paid owners (Circle, Guard+, Guard) and trial / demo accounts — sorted by expiry. Covered family members aren't listed (their owner is). Filter by plan and window, then assign a discount coupon to the segment — it appears in their account portal with the code pre-filled at checkout, so the offer applies itself when they renew.
Profit & Loss
Revenue for past days is read from the nightly rollup; today is live. Expenses are entered below (recurring costs amortised per month). A refunded sale counts as zero.
All PayU transactions. Reconcile re-checks pending invoices with PayU (recovers a lost payment callback). Refund returns the money via PayU and unwinds the licence; Unwind only reverses the licence (use it when the money was already refunded elsewhere). downloads a GST invoice.
Append-only record of licence & lifecycle events — code mints/redemptions, refunds, circle & seat changes. Preserved even when spent codes are purged, so it's your source of truth for who did what, when.
Referral Payouts
Cashing out referral points is not open to everyone. It is a private arrangement: you switch it on for a person and set their rate, and only then does the app show them anything about money. Everyone else sees the ladder, the badges and the free days — which is what keeps the programme affordable.
Leave the rate blank to keep the default. Changing terms is written to the audit log.
Requests Waiting
Protection Features
Turn a detection off everywhere, or narrow it to one platform or plan, without shipping an app update. Use this when a check starts producing false positives — a wrong accusation teaches people to ignore the real warnings, so switching it off is usually better than leaving it running while a fix ships. Devices pick changes up on their next sync, typically within a few minutes.
Cancellation Policy
Controls the self-service Cancel subscription button on every customer’s account. Changes take effect immediately — no code change or redeploy.
Introductory Pricing
When a plan has a base price above its charged price, show the intro discount (struck-through base + derived % off). Choose whether it applies to new purchases and to renewals.
Metered Spend
The only features that cost money per use. Turning one off never breaks a check — the phone’s own analysis is the product and these are a second opinion on top of it. A cap of 0 means “no cap beyond the free allowance”. Watch the Overview for watermark alerts before changing these.
Detonation renders a page in a real browser, and only when reading it came back blind (hides_from_us). Cloudflare’s free tier is 10 minutes of browser time a day, capped rather than billed, which is roughly 75 renders — so the cap here is the rail that keeps us inside it. It also needs a Browser Rendering: Edit token; without one this stays dormant and page checks fall back to the static scan.
Supported App Versions
Phones below the minimum are refused by the cloud and told to update; their on-device checks keep running. Below the recommended version they are only nudged. Leave blank to enforce nothing. Use the version name, e.g. 26.0811.1051.
Raise the minimum only after a release has finished rolling out on Play. During a staged rollout some phones cannot get the new build yet, and refusing them locks out people who have no way to comply.
To tell phones a release is out, use System → Packages → Announce An Update. Setting the floor here is silent — nobody is notified.
Provision a Circle
Create a Circle for an owner. Family = free comp grant (up to 5 seats, no bill). Business = custom seats at a per-seat price — Create makes the Circle and generates a GST-exclusive quote to pay. For a pilot, set Duration to 30 or 60 days and Discount to 100: the invoice still shows what the seats are worth, nothing is due, and the Circle activates at once — so the renewal conversation has a real number behind it.
All Circles
Blocked Devices
Devices flagged as abusive or blocked manually. A blocked device is refused when it tries to register with a new email (the app sends it to support). Unblock to allow it again, or remove the record.
Reported Links
Links users flagged as suspicious (often with the SMS pasted in). Review, set a verdict, and it warms the shared verdict cache so every client that later checks the same link gets your decision. Resolved reports are auto-deleted 30 days after review.
Cleared Domains
Domains we were wrong about. Everything else here can only accuse; this is the one list that withdraws an accusation. A cleared domain is floored to safe on every phone — the app's own offline rules stop raising it too — which is what makes it the one edit that can hide a real scam. It reaches phones on their next rules fetch, within the hour.
A total tells you where you stand; only a line tells you whether that is good news. Everything here is drawn from the nightly rollups, so it costs a few hundred rows to open.
Shipping a feature is not the same as it running. These are the phones reporting their own settings — a phone that has never reported counts as unknown, never as covered.
These are honest operational numbers, including device models, OS and app versions, which are PII-adjacent. The public impact page is marketing-only — percentages, no counts, no PII.
Announce An Update
Declares a release current and notifies the phones running something older. Do this once a release has finished rolling out on Play — Play knows what has been uploaded, not what a given user can install, so announcing during a staged rollout or a closed test points people at a build they cannot get.
Each phone is notified at most once a day, capped on the server. Phones that never open Parakh are the whole reason this exists, so they cannot be trusted to remember being told. Check who is behind first — a phone with no push token cannot be reached at all.
App Distribution
Published sideload builds and the three update rings. Dev gets each new publish first, then you promote to Preview, then Prod (the public download page). Set a ring to any build to roll forward or back. Deleting a build removes its APKs from storage — allowed only once it backs no ring.