A Fortify 24x7 brand. Grown up security platforms, sold the way software used to be sold.Client sign inMail an engineer
Cyb3rs3cur1ty
Module 03 // Email defense

The attack does not arrive as a virus. It arrives as a polite request.

Most money that leaves a small company on somebody else's instruction leaves through the mail. No malware, no exploit, just a message that looks like a person you already trust asking for something ordinary. Ironscales connects to the mailbox itself over an API and reads what actually landed there.

IronscalesMailbox level APISimulation and training
2 lines / Microsoft 365 or Google Workspace / no MX change
Lines here2
EngineIronscales
Connects byAPI into the tenant
Counted byMailbox or user

Gateways versus mailboxes, and why the difference matters

A gateway parks itself ahead of your mail and checks messages as they pass. That means aiming your MX records somewhere new, and it means a message that turns hostile an hour later is already sitting in an inbox the gateway can no longer touch. Ironscales works from the opposite direction. It connects to Microsoft 365 or Workspace from the inside, sees a mailbox the way the mailbox sees itself, and can lift a message straight back out afterwards.

It also covers mail between colleagues, which never crosses a gateway at all. When an account inside your own tenant gets taken over, the messages it sends internally are the ones people believe, and those are precisely the ones a perimeter product never gets to inspect.

A gateway cannot reach into an inbox an hour after delivery. This can.

Training that stops treating people as the problem

Annual training theatre changes nothing. Short simulations, sent at uneven intervals and followed by two minutes of explanation while the moment is still fresh, do change something. People who never fall for anything get left in peace, and the attention goes where it is needed.

Reporting is part of it as well. A one click report button turns your staff into sensors, and a reported message gets clustered with everything resembling it across the tenant, so a single report can clear the same attempt out of forty mailboxes.

Lines on this module

Specifications and rates

Every rate below arrives live from billing. Anything you pick up drops into the inventory panel and sits there quietly.

Fortify-FES+SATSpec

Mailbox Defense with Training

Ironscales living in the tenant, training and simulation included

Protection sitting in the mailbox with a training program attached. It reads messages that already landed, including the ones sent by a colleague.

  • Plugs into the tenant by API, and no MX record has to move.
  • Impersonation and account takeover spotted using your tenant as the baseline.
  • Reported messages get grouped, so one report can clean up many mailboxes.
EngineIronscales
Wired in byAn API sitting inside your own tenant
SitsIn the mailbox, never out in front of it
Takes inInbound mail and mail between colleagues
DrillsSimulation and short lessons included
Counted byMailbox, each month
Loadingper mailbox
billed each month, in advance
QTY
Fortify-SATSpec

Phishing Simulation and Training

Just the drills, without the mailbox half

Drills without the mailbox half, aimed at shops that already like their mail filtering but whose people have never faced anything resembling the real thing.

  • Simulations that look like current attacks rather than a screenshot from 2009.
  • Follow up lessons go automatically to the people who need one.
  • Results tracked by individual and by team, so progress is visible.
EngineIronscales
Eyes onSimulation and awareness training only
Who gets itFollow up lessons triggered by what somebody clicked
ScoreboardBy individual and by team, tracked over time
Counted byUser, each month
Loadingper user
billed each month, in advance
QTY
Honest scope

What sits in the box, and what does not

Email is where the money tends to vanish, so the boundary here deserves a careful read before you buy anything.

IN THE BOX

  • API level protection living in the tenant you already own, with no MX record to repoint anywhere.
  • Removal after delivery so a message judged hostile later can still be taken out of the mailboxes it reached.
  • Internal mail inspection which is where a taken over colleague account does its real damage.
  • Simulations and short lessons aimed at the people who genuinely keep clicking rather than at everybody.
  • One click reporting that clusters similar messages right across the tenant.

NOT IN THE BOX

  • Your mail hosting. We protect a tenant you already own. Running or migrating the tenant itself is separate work.
  • A promise that nothing ever slips past. A carefully written message carrying neither a link nor an attachment is a hard problem for every product in this category, this one included.
  • Payment approval. No email product decides whether your bookkeeper should move money. A callback rule that you enforce does that.
  • Keeping copies of mail. Archiving and backup of mailboxes live in the backup and continuity module.
  • Personal webmail. Anything outside the business tenant sits outside these two lines.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - Cyb3rs3cur1ty is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.