# Roadmap – BastionGuard 

## Phishing Scanner Module

Implementation of the **Phishing Scanner** module in BastionGuard using **GTK4/gtkmm4**.

This feature allows users to analyze a URL for potential phishing attacks by querying the **BastionGuard Security Intelligence** service.

### Features

- URL analysis using BastionGuard Security Intelligence
- Integrated GTK4/gtkmm4 interface
- Search tab for URL entry
- Asynchronous analysis to avoid UI crashes
- HTML analysis of remote analysis results
- Structured results reports
- Styled results panel
- Multilingual support


# BastionGuard – Outgoing Email Protection Architecture

This architecture allows **BastionGuard** to add an additional security layer to outgoing email traffic without modifying the behavior of email clients and without requiring integration with email providers.

---

## Key Features

### Local SMTP Proxy

- Transparent SMTP interception for outgoing email  
- Compatible with common mail clients (**Thunderbird**, **Evolution**, **KMail**, **Geary**, etc.)  
- Runs as a lightweight **systemd user service**  
- No client plugins required  

---

### Multi-SMTP Relay Support

- Multiple SMTP relay profiles  
- Profile selection based on sender email or domain  
- Support for multiple providers simultaneously  
- Suitable for **personal, corporate, and mixed email environments**  

---

### Antivirus Scanning

- Integration with **ClamAV (`clamd`)**  
- Scans **message body and attachments** before sending  
- Uses **socket streaming** instead of spawning external processes  
- Blocks messages containing malware  

---

### Anti-Phishing Protection

- Extracts and analyzes **URLs in email content**  
- Uses **BastionGuard's AntiPhishingEngine**  
- Detects **suspicious or malicious domains** before delivery  

---

### Automatic HTML Signature Injection

Optional automatic insertion of **HTML email signatures**.

Configurable fields:

- Name  
- Job title  
- Company  
- Phone  
- Website  
- Logo  

---

### Transparent Client Integration

- Works with **any SMTP-compatible email client**  
- Requires only changing the SMTP server to: