Stop employees using
the wrong email domain

DomainGuard is deployed silently using your existing MDM solution — Microsoft Intune or Group Policy (GPO). You generate an API token in the admin console, include it in your MDM configuration, and the extension installs automatically on all managed devices. Employees never see a prompt.

Yes. The extension caches your policy rules locally. If a device temporarily loses internet access, the cached rules continue to be enforced. Policies sync automatically every 15 minutes when connectivity is restored.

Yes. You can create individual rules for any site — each rule has its own site pattern and list of approved email domains. For example, Slack might allow @company.com while Salesforce allows both @company.com and @subsidiary.com.

No. The extension uses Chrome's Manifest V3 which runs as a service worker — it only activates when a login form is detected on a page. It has no impact on general browsing speed or performance.

Yes — the same extension works on both Chrome and Edge since both support the WebExtensions API and Manifest V3. You can deploy to both browsers from a single admin console.

DomainGuard logs rule match events (which site, which rule was triggered, and a hashed machine identifier) to your audit log. No personal browsing data, passwords, or email content is ever collected. All data is stored in your organisation's isolated database partition.

Yes. Cancel anytime from the billing portal — no lock-in, no cancellation fees. Your subscription continues until the end of the current billing period.