About SmishAlert
Phishing moved. Security didn't.
SmishAlert protects organizations and the people they serve from social engineering attacks that happen beyond email. It gives people an immediate way to verify suspicious messages, gives high-risk users proactive protection, and gives security teams visibility into coordinated attacks their existing security stack can't see.
Where it started
It started in an annual security awareness training at a large private equity firm. Same slides every year, and the same reality every year: people were being targeted by text and messaging, with fake CEOs, payroll lures and help desk cons, and nothing stood between the attack and the person holding the phone. Training told people to be careful. Nothing was there in the moment it mattered.
The gap we saw
For twenty years organizations invested heavily in protecting email, and attackers adapted. Employees, executives, students and customers are now targeted through SMS, messaging apps and voice, and the security team often has little or no visibility into those interactions.
What we built
One platform with three jobs. REPORT gives anyone a trusted place to send a suspicious message and get guidance right away. PROTECT proactively identifies threats for employees and high-risk users. UNDERSTAND gives security teams visibility into the campaigns behind those messages, so they can protect the next target.
Who we serve
Banks and credit unions that want to give every customer somewhere to send a suspicious text. Universities that can't install software on every student's phone. And security and IT teams, often lean ones, whose phishing program stops at the inbox.
Helpful to the person first
If it isn't useful to someone holding a real phone, it won't protect the organization behind them. Every feature starts there.
Evidence, not certainty
SmishAlert identifies evidence of risk. It does not authenticate third-party communications. We tell people what the evidence shows, plainly, and say so when we can't be sure.
Scoped by design
Automatic screening covers unknown-sender messages only. Everything else reaches security only when the employee chooses to report it.
Founder
Neil Carew
Founder, SmishAlert
Neil founded SmishAlert after seeing the same gap across the security and software companies he worked with: organizations spent decades hardening email while social engineering moved to the phones their people carry every day.
Before SmishAlert, he spent fifteen years inside PE-backed software companies and on the value creation teams at Vista Equity Partners and PSG Equity, where he worked closely with cybersecurity investments and served on the boards of ThreatConnect and NoFraud (now Wyllo). Most recently he was COO of Wagepoint.
Connect on LinkedInThe team
We're a small team headquartered in Dallas. We respond to our own support tickets. When you work with us, you're working with the people who build the product, run your pilot, and deliver your readout.
You may have seen us at RSAC 2026 · Black Hat USA 2026, booth 6100 · D CEO awards finalist.
Talk to us
Talk to the team.
A short scoping call with the team that runs your pilot. We respond within 4 business hours with scope and timeline.
Or take the 2-minute self-evaluation , no email required.