.HARD secures everything you do online: your Mac, your iPhone, your browser and your Wi-Fi. A small security agent that steps in at the moments a scam needs you to go along with it. For you, your family, and the parents you look after.
Also for iPhone, and Chrome and Brave. Android is on the way.
Stopped a fake sitenow
g00gle.com isn’t Google. The 0 is standing in for an o.
Needs you
Today
Tuesday
9:41
Scam text moved to Junknow
“Hi Mum, I broke my phone…” is a known scam. Call Sarah on her usual number.
Update iOS today8m ago
One of the fixes is being used in attacks.
9:41
Tuesday · 18°
HARD · now
Scam text moved to spam“Hi Mum, I broke my phone…” is a known scam. Call Sarah on her usual number.
HARD · 8m
Update Android todayOne of the fixes is being used in attacks.
One Tuesday morning, a scam goes after someone’s mum. First, the way it goes today.
iMessage
Today 9:02 am
Hi Mum, I broke my phone 😩 This is my new number, can you save it?
Can you pay an invoice for me today? It’s urgent, I’ll pay you back tonight. Don’t tell Dad x
The sender is not in your contact list.
Report Junk
Oh no! Of course love. What do you need?
+61 491 570 156
mobile · 0:48
Live Captions
“Mum? It’s me. I’m so sorry, my phone’s smashed. Did you get my text? I need it done before lunch.”
NAB
13 22 65 · 2:41
Live Captions
“This is Daniel from NAB’s fraud team. Your account’s been compromised. We need to move your savings into a safe account today, and please don’t mention this at the branch.”
Verify you’re identity to secure account
For your protection please log in below to confirm your details.
Log in
Verify and secure Forgot your NAB ID?©2019 National Australia Bank Limited
aANot Secure — nab-secure-verify.com
Live Captions · NAB
“Just tap Start Broadcast so I can see what you see.”
AAnyDesk
Everything shown on your screen, including notifications, will be recorded.
Start Broadcast$98,400.00
to Secure Holding Account
BSB 083-127 · Acc 4419 8802
iMessage
Sun 19 Oct 6:14 pm
Lovely lunch today, thank you darling
Drive safe x
Home now! Love you Mum ❤️
Today 9:31 am
Hi Mum! Did you call? I’ve been in meetings all morning.
Phone’s fine, why? x
Tuesday 9:02 am
A text from a new number. She replies. Of course she does.
Then Sarah calls. Her voice, her laugh, the way she says Mum. It isn’t Sarah.
Now it’s the bank. Her money isn’t safe, they say, and it has to move today.
She signs in on the link they send, and types in the code.
“Just so I can help.” She lets them see her screen.
She sends $98,400 to a “safe account”.
The line goes dead. Sarah never called.
$98,400.
Gone in 24 minutes.
In 2024, Australians reported losing $2.03 billion to scams. Phone scams cost the most of any contact method, and remote-access scams alone took $106 million. National Anti-Scam Centre
Hi Mum, I broke my phone and this is my new number. Can you pay this invoice for me today? It's urgent, $2,400 to BSB 062-000. Please don't tell Dad.
This time, Mum isn’t sure. She copies it into HARD.
Is this legit?
A messageI’m on a call
+61 491 570 156Text message · Today 9:01 am
On iPhone, HARD’s text filter can also file messages like this under Junk before she sees them.
Her voice, her laugh, the way she says Mum. A few seconds of video is enough to clone a voice now. But Mum and Sarah paired their phones at Christmas, so Mum asks for her HARD code.
HARD codes
A voice can be cloned and a number can be faked. When someone asks for money, ask for their HARD code.
Codes change every 30 seconds
What’s Sarah’s HARD code?
How to use it
1Pair once, in person.
2Ask: “What’s your HARD code?”
3No match? Hang up and call back.
MumOn Sarah’s phone, across town
••• •••
The same code, on both phones, changing every 30 seconds.
The codes are real: the same RFC 6238 maths as the apps, running in your browser. Real pairs live only in each phone’s Keychain.
Her account has been compromised, they say. The money has to move to a safe account today, and she mustn’t tell the branch. While they talk, Mum opens HARD and answers its questions.
Is this legit?
A messageI’m on a call
Answer while they talk. What they ask for gives them away.
Verify your identity to secure your account: https://nab-secure-verify.com/login
The page would look exactly like NAB’s, logo and all. It never gets the chance.
Stopped by HARD
M
The HARD extension for Chrome and Brave knows 392,178 phishing sites, catches lookalike spellings like g00gle.com, and clears a password typed into the wrong site before it’s sent.
They ask her to install AnyDesk so they can “see the problem”. With it they could see her screen and move her mouse. The moment it tries to connect, HARD for Mac asks.
AnyDesk wants to connectnow
relay-6f1c.net.anydesk.com
Remote control: someone else could see and use this Mac.
If AnyDesk, TeamViewer or Quick Assist is open while she’s on her bank, the extension asks, “Is someone controlling this computer?”
Everything has been leading here: a new payee called Secure Holding Account, and almost everything she has. She presses Pay.
Pay someone new
HARD paused this payment
You’re about to send $98,400 to someone new. Once it’s gone, it’s usually gone for good. Answer these honestly:
If any answer is yes, stop. Hang up, then call the number on the back of your card. Never a number they gave you.
The pause comes up on banks, payment apps and crypto exchanges for big amounts, new payees and crypto withdrawals. The threshold is yours to set.
You set HARD up for Mum last month. So when it pauses a big transfer on her Mac, you hear about it too, and so does your operator, who calls her before you’ve finished reading.
Tuesday 21 October
9:27
Mum’s Mac paused a $98,400 transfernow
To a new payee, while she’s on a call with someone saying they’re NAB.
Operator is calling Mumnow
I’ll stay on until the caller’s gone and her bank has frozen the payee.
She’s safe. Nothing was sent.now
Operator: she’s calling Sarah on her usual number.
Mum’s savings: $100,000.00
She makes a cup of tea, and calls Sarah on her usual number.
On your Mac, your iPhone and your browser, for everyone you look after. Early access is open now.
Also for iPhone, and Chrome and Brave. Android is on the way.
One app secures everything, on every device. Use it on your own, share it with the people you live with, or run it for the people you worry about.
Your Mac, iPhone and browsers, watched all day. Scam checks, fake sites stopped, updates ranked, every app’s traffic, your Wi-Fi.
Personal, US$4 a monthUp to six people, each with their own HARD and HARD codes between everyone, so a cloned voice gets nowhere.
Family, US$7 a monthManage HARD for someone else. Set it up once, together, and the alerts that matter come to you too.
Included in FamilyOrganisers can add people, manage anyone’s HARD and get their alerts. Everyone else just gets protected.
Scammers go after people with savings who are too polite to hang up. With a managed account you set HARD up on their Mac and iPhone, together, and hear about the things that matter.
Everything HARD does
An app on your Mac and iPhone, an extension in your browser, and a check on everything else on your Wi-Fi.
WindowsComing
iPadComing
Mac, with Chrome and BraveToday
iPhoneToday
AndroidComing
TVChecked
RouterChecked
PrinterChecked
CameraChecked
SpeakerChecked
No app needed. HARD checks them from your Mac.
Coming: iPad, Windows, Android. Edge, Firefox and Safari.
01 Chrome and Brave
Not a visit. Not your password.
02 Mac
What each one sends, and to whom.
03 Mac
A firewall in three settings.
04 Mac
The flaws attackers are using go to the top.
05 Mac
Every device on your Wi-Fi, checked. Even the ones that can’t run an app. See how we harden a home
06 iPhone
Scam texts filed under Junk. Gadgets checked before you plug them in.
07 Mac
HARD’s agent answers first. Your operator steps in.
Each number is how many flaws CISA confirmed as being used in attacks that day. Stronger colour means more.
| Mon | Tue | Wed | Thu | Fri | Sat | Sun |
|---|---|---|---|---|---|---|
| 1 flaw | 3 flaws | 3 flaws | ||||
| 1 flaw | 4 flaws | 2 flaws | 3 flaws | 2 flaws | ||
| 1 flaw | 1 flaw | 1 flaw | 2 flaws | 1 flaw | ||
| 5 flaws | ||||||
| 2 flaws | 4 flaws | 1 flaw | 2 flaws | |||
| 6 flaws | Today |
Strapi, ONLYOFFICE, Apache, ISC, ProFTPD
Zammad ×2
Citrix ×2
Check Point ×2, F5, Arista
Linux ×3
Plex ×4, Siemens, EG Secure Solutions
CVE-2026-110936 · Uncontrolled search path elementCVE-2026-106931 · OS command injectionCVE-2026-96656 · External control of file name or pathCVE-2026-96655 · Server-side request forgery (SSRF)CVE-2026-96654 · Improper neutralization of encoded URI schemes in a web pageCVE-2026-96652 · Server-side request forgery (SSRF)HARD for Mac, iPhone and the browser extension are in early access.
For one person, on every device.
US$4a month
Billed yearly at US$48
Join early accessBest for families
FamilyFor up to 6 people, including parents you look after.
US$7a month
Billed yearly at US$84
Join early accessFor your team, priced per person.
US$9a person a month
Billed yearly
Join early accessA little AI agent that lives on your Mac and iPhone and in your browser. It stops fake sites before they load, tells you whether a call, text or email is a scam and what to do, ranks missing updates by whether attackers are using them, shows what every app sends and to whom, and checks the devices on your home Wi-Fi. You shouldn't have to think about it.
Hang up and call the number on the back of your card. Banks don't ask you to move money to a “safe account”, read out a code they've just sent you, or keep it from the branch. If you're unsure while they're still talking, open Is this legit?, choose I'm on a call and answer the yes-or-no questions. HARD tells you what it thinks and what to do.
You and your family pair phones once, in person. After that both apps show the same six-digit code, which changes every 30 seconds (the same standard authenticator apps use, RFC 6238). When someone who sounds like your daughter calls from a new number asking for money, ask for her HARD code. A cloned voice can copy how she sounds, but it can't know the code.
HARD sees the attack, not your life. Your codes, your traffic stats and what HARD finds stay on your devices, and the scam-text filter runs on the iPhone. Text leaves your device only when you ask: the optional Claude second opinion and the Operator chat send what you type to Anthropic, and the app says so before you send it.
Yes. On the Family plan you can manage HARD for someone else. Set it up on their Mac and iPhone once, together. After that you hear about what matters: a big transfer HARD paused, a fake site it stopped, an update that's being used in attacks. You see what needs fixing on their devices, not their messages, browsing or bank balance.
No. It goes after what people actually lose money to: convincing calls and messages, fake sites and sign-in pages, and software with holes attackers are already using.
Not yet. Today there is HARD for Mac, HARD for iPhone, and the browser extension for Chrome and Brave.
No. The apps work on their own, and HARD's agent answers in the Operator chat. The membership adds a named senior engineer who knows your household's accounts, devices and homes, and picks up when it matters. It's US$2,750 a month or US$33,000 a year.
HARD is in early access. Leave your email at the bottom of this page and we'll write when there's a place for you.