Israel's National Cyber Directorate launched the National Cyber Portal on Wednesday, 4 November 2026. It is a single site that gathers free tools for defending against attacks, aimed at individuals, businesses and organizations. The launch comes ahead of National Cyber Defense Week, which runs from 8 to 12 November.
A small business owner gets two useful things out of it. One is open to anyone and checks links. The other is a separate business area that requires registration and tests the business's own systems. The portal lives at portal.cyber.gov.il.
The numbers behind the launch
According to the Directorate, phishing attacks (fake messages that try to get you to click a link or hand over details) are up about 145% on last year. Since the start of 2026 it has received more than 26,000 reports from the public and from organizations about suspected attacks. More than 5,000 of those were cyber incidents inside organizations' computer systems.
A small business is as exposed as anyone. Invoices, orders and payment requests arrive by email and WhatsApp, and one click on a fake link is enough to hand someone access to the mailbox or the computer.
Checking a link before you click
The main public tool is called Click Check. You copy a link from a message or a social network, paste it into the tool and get an estimate of how trustworthy it is. The tool cross-references several sources to spot links that lead to impersonation sites or download malware. Links it flags as malicious are passed automatically to the Directorate, which works on getting them taken down.
The Directorate points to its own survey as the reason: one in three Israelis does not know how to check whether a link they received is suspicious. Alongside the checker, the portal has a game called Spot the Impostor for practicing how to recognize phishing messages, plus sign-up for alerts on current threats. The game is worth passing to employees, who are usually the ones opening the first emails of the day.
A separate area for businesses
The area for businesses and organizations opens after registration. According to the Directorate, it lets you check:
- How well the business's digital assets are protected, mail servers included.
- How well the suppliers the business works with are protected.
- Whether the business's sign-in mechanisms meet the requirements for secure digital identification.
- Suspicious files, through a self-check tool called Hashtag.
The area also has guides for running a cyber incident drill, alerts matched to the organization's line of work, and a fast way to report an incident.
The supplier check matters for any small business. The accountant, the hosting company and the software vendor all hold access to the business's data, and a breach on their side can reach it too.
Worth doing this week
If the business uses an email address on its own domain, register for the business area and run the mail server check. A badly configured mail server lets impostors send messages that look as if they came from the business, to its customers and suppliers.
Bookmark Click Check in the browser and on the phone, and use it whenever a payment request, a parcel notice or a letter in the name of a government agency arrives with a link. The check takes less time than a phone call to verify.
The portal's services are free. The Directorate has not said how long registration for the business area takes or what details it asks for.