Most money that leaves a small company on somebody else's instruction leaves through the mail. No malware, no exploit, just a message that looks like a person you already trust asking for something ordinary. Ironscales connects to the mailbox itself over an API and reads what actually landed there.
A gateway parks itself ahead of your mail and checks messages as they pass. That means aiming your MX records somewhere new, and it means a message that turns hostile an hour later is already sitting in an inbox the gateway can no longer touch. Ironscales works from the opposite direction. It connects to Microsoft 365 or Workspace from the inside, sees a mailbox the way the mailbox sees itself, and can lift a message straight back out afterwards.
It also covers mail between colleagues, which never crosses a gateway at all. When an account inside your own tenant gets taken over, the messages it sends internally are the ones people believe, and those are precisely the ones a perimeter product never gets to inspect.
Annual training theatre changes nothing. Short simulations, sent at uneven intervals and followed by two minutes of explanation while the moment is still fresh, do change something. People who never fall for anything get left in peace, and the attention goes where it is needed.
Reporting is part of it as well. A one click report button turns your staff into sensors, and a reported message gets clustered with everything resembling it across the tenant, so a single report can clear the same attempt out of forty mailboxes.
Every rate below arrives live from billing. Anything you pick up drops into the inventory panel and sits there quietly.
Protection sitting in the mailbox with a training program attached. It reads messages that already landed, including the ones sent by a colleague.
| Engine | Ironscales |
|---|---|
| Wired in by | An API sitting inside your own tenant |
| Sits | In the mailbox, never out in front of it |
| Takes in | Inbound mail and mail between colleagues |
| Drills | Simulation and short lessons included |
| Counted by | Mailbox, each month |
Drills without the mailbox half, aimed at shops that already like their mail filtering but whose people have never faced anything resembling the real thing.
| Engine | Ironscales |
|---|---|
| Eyes on | Simulation and awareness training only |
| Who gets it | Follow up lessons triggered by what somebody clicked |
| Scoreboard | By individual and by team, tracked over time |
| Counted by | User, each month |
Email is where the money tends to vanish, so the boundary here deserves a careful read before you buy anything.
Heads up: card statements show FORTIFY 24X7 - Cyb3rs3cur1ty is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.