Competitive differentiation / 2026
Three classes of players contest this market: the incumbent security suites, the platforms and general AI assistants, and the funded startups. Each has shipped a scam feature. None has shipped the security team — the always-on AI layer that sees every screen you own, judges every surface, and protects before it’s too late. Their own documentation, feature by feature, defines the gap FoilerAI occupies.
Now in private alpha — protecting Gmail today. Capabilities beyond the current release are on the roadmap: planned and subject to change.
01 — The incumbent suites
The incumbents have shipped the category — Genie across Norton 360, Scam Detector on all core McAfee+ plans, Scam Copilot in Bitdefender’s top suites — and NordVPN now sells itself as an all-in-one security platform, with a next-gen antivirus, scam call protection and an AI voice detector. That validates the market. It also draws the map.
| Capability | Norton (Genie) | McAfee (Scam Detector) | Bitdefender (Scam Copilot / Scamio) | NordVPN | FoilerAI |
|---|---|---|---|---|---|
| Automated text / SMS scanning | Limited | Limited | ✔ | ✘ | ✔ |
| Call & voice-clone protection | Limited | ✘ | Limited | Limited | ✔ |
| Deepfake detection | Limited | Limited | Limited | Limited | ✔ |
| Email & invoice (BEC) verification | Limited | Limited | Limited | ✘ | ✔ |
| Cross-device correlation | ✘ | ✘ | ✘ | ✘ | ✔ |
| Guardian / protected-person flow | ✘ | ✘ | ✘ | ✘ | ✔ |
| Agentic remediation | ✘ | ✘ | ✘ | ✘ | ✔ |
| Institutional program layer | ✘ | ✘ | ✘ | ✘ | ✔ |
| Manages native OS protections | ✘ | ✘ | ✘ | ✘ | ✔ |
| Pricing posture | Best features gated to the priciest LifeLock tiers; suite renewals hike 40–100% | Included in core plans; renewal hikes typical | Gated to Ultimate and Premium tiers | Call Protection in select plans; deep first-term discounts (up to 75% off) | Flat, transparent — no intro bait, never raised |
FoilerAI is engine-agnostic by design; the incumbents are engine-locked by business model. Orchestrating the built-in controls — Defender, Play Protect, screen locks — would cannibalize the replacement engine that is their core product. Native-protection management is a structural moat, not a feature gap.
The remaining gaps — cross-device identity, the personal baseline, the guardian flow, the institutional layer — require architectural rebuilds, not feature patches on per-surface silos. Their scam features bolt onto per-device products; ours is the product.
Even the best incumbent stack has no voice-clone calls, no invoice checks, no cross-device brain, and no guardian loop — and renewal prices climb while flat pricing holds.
02 — Platforms & AI assistants
Platform vendors are embedding scam detection natively — each inside its own garden — and general AI assistants answer only the questions users think to ask.
| Capability | Apple | Microsoft | AI assistants | FoilerAI | |
|---|---|---|---|---|---|
| Scam screening scope | Limited | Limited | Limited | Limited | ✔ |
| Interception in the flow (vs. ask-first inquiry) | Limited | Limited | Limited | ✘ | ✔ |
| Mixed-device household (iPhone + Windows PC + Android tablet) | ✘ | ✘ | ✘ | ✘ | ✔ |
| Email, browser & bank-impostor coverage beyond its own surface | ✘ | ✘ | ✘ | ✘ | ✔ |
| Live threat signals (domain age, sender authentication, hourly scam corpus) | Limited | Limited | Limited | ✘ | ✔ |
| Personal baseline & cross-device picture | ✘ | ✘ | ✘ | ✘ | ✔ |
| Accountable, calibrated verdicts | ✘ | ✘ | ✘ | ✘ | ✔ |
| Independence (not grading its own ecosystem) | ✘ | ✘ | ✘ | ✘ | ✔ |
| Small business tier | ✘ | ✘ | ✘ | ✘ | ✔ |
Independence is the product. Platforms and assistants grading their own ecosystems is the fox watching the henhouse. FoilerAI is the user’s agent — the cross-platform, cross-channel version of what each platform builds only for its own garden.
An assistant answers only what you think to ask. FoilerAI evaluates what you never thought to question — calls screened before you answer, links and checkout pages caught at the click.
A real household runs an iPhone, a Windows PC and an Android tablet. Each platform protects its own; FoilerAI covers Android, Windows, macOS and iOS within each one’s rules, with email protection and the personal baseline in the cloud for all of them.
03 — The funded startups
Funded startups each own a slice of the problem — masking, after-the-fact monitoring, or the handset. None judges the whole person across every surface before the loss.
| Cloaked | Carefull | Savi Security | FoilerAI | |
|---|---|---|---|---|
| Model | Privacy-first: aliases, data-broker removal, masking | Post-transaction account monitoring for aging adults | Phone-only scam interception | Whole-person verdict layer before it’s too late |
| Full-surface coverage (phone, tablet, PC; email + invoices) | Limited | Limited | Limited | ✔ |
| Email & invoice (BEC) protection | ✘ | ✘ | Limited | ✔ |
| Cross-device correlation | ✘ | ✘ | ✘ | ✔ |
| Voice-clone & image scoring | ✘ | ✘ | ✘ | ✔ |
| Manages native OS protections | ✘ | ✘ | ✘ | ✔ |
| Small business tier | ✘ | ✘ | ✘ | ✔ |
| Institutional channel | ✘ | ✔ | ✘ | ✔ |
| Pricing | ~$120 / year | FI-sponsored member benefit (direct plan offered) | $7.99/mo or $62.99/yr, unlimited members — loss-leader-shaped | $96/yr Personal · measured, margin-backed flat pricing |
Prevention by hiding vs. protection by judging — a masked number still receives the grandparent call, and masking has no verdict to give.
Carefull holds the institutional door but monitors after the money moves; we bring interception — before the loss — through that same door.
We contest the whole person: everything past the phone — the PC, the inbox, the invoice, the cross-device picture.
The rest of the field. Point-check apps (Truecaller, Guardio) sell single-surface checks; identity-monitoring products act after the loss; SMB security suites are built for 10–250 seats run by IT staff and cannot economically reach the small business with no one to run its security.
Cross-device correlation, cross-channel attack tracking, a personal baseline, guardian alerts, native-protection management, and an institutional program layer — one flat-priced subscription, every verdict explained in plain English. That is the security team; everything else is a feature.
Sources: each vendor’s own published documentation and pricing (2026); company press and launch materials (Cloaked, Carefull, Savi Security); independent 2026 industry testing. Roadmap capabilities beyond the current release are planned and subject to change.