One key, one invoice, one desk. A Fortify 24x7 brand.Account sign inReach an engineer
Iconic IT Innovations
Plate 03 / Mail defense

The invoice that costs you money looks exactly like the ones that do not.

Nothing else in the organisation is asked to make as many judgement calls per day as a person working through their inbox. The two lines on this plate operate at the mailbox itself and on the habits of whoever is reading it, which between them are the only places a genuinely convincing message can still be caught.

IronscalesMailbox-level APIMicrosoft and GoogleRehearsal and modules
2 lines / Ironscales
Lines on this plate2
PlatformIronscales
Measured inMailbox or user
Joins byA mailbox-level API

Sitting inside the tenant, never out ahead of it

Ironscales joins through a mailbox-level API. Nothing about that makes it a gateway, the word gets no use here, and switching it on leaves mail routing and MX records untouched. It examines what has arrived in the mailbox, and that distinction matters more than it first sounds: a message from a colleague whose account was taken over yesterday never crosses a perimeter at all, so anything standing outside the tenant simply never sees it.

On an estate of any size the detections that earn their keep are impersonation and hijacked accounts, both calibrated against the way your own staff write to one another. When somebody reports a message it gets withdrawn wherever it landed, not merely from the single account that spoke up, which is the difference between an afternoon and an incident.

Anything standing in front of the tenant cannot see the message a hijacked colleague sends from two desks away.

Rehearsal that is aimed rather than broadcast

The annual awareness video is a compliance artefact rather than a control. Everyone watches it in the same week, nobody can recall it by spring, and the only thing the reporting proves is that it played. Rehearsal running all year produces something more useful: a live picture of who genuinely struggles, refreshed week by week.

Follow up is then handed out on the strength of the result, so whoever needs five minutes gets five minutes and everyone else is left to work. Results gather by team, which lets a manager have a useful conversation without it becoming a conversation about named individuals.

Lines on this plate

Detail and rates

Every rate below is fetched from billing the moment this page opens. Whatever gets marked waits in the schedule; reading on costs you nothing.

Fortify-FES+SATSign spec

Mailbox Defense with Training

Inside the tenant, with rehearsal bolted alongside

Ironscales joins by a mailbox-level API, examining mail after delivery, which is precisely where the message that costs a company money turns up.

  • Operates within your Microsoft or Google tenant, with nothing rerouted through anybody.
  • Watches for impersonation and hijacked accounts, calibrated on how your staff write.
  • Report one and it is withdrawn wherever it landed, not just where somebody spoke up.
PlatformIronscales
Joins byA mailbox-level API within your own tenant
Never a gatewayMail routing and MX records are left exactly alone
Watches forImpersonation, hijacked accounts, hostile links and attachments
Clean upWithdrawn wherever the message landed
Measured inMailbox, each month
Readingper mailbox
charged ahead of each month
QTY
Fortify-SATSign spec

Phishing Simulation and Training

Rehearsal and awareness modules out of Ironscales

Rehearsal aimed at the handful of people who keep struggling, rather than a yearly video the entire company clicks through on one wet afternoon in November.

  • Campaigns run all year instead of turning up once as a scheduled event.
  • Follow up is handed out according to what the person actually did with the message.
  • Results roll up by team, which is what makes a manager conversation possible.
PlatformIronscales
RehearsalYear round campaigns rather than one annual exercise
ModulesShort pieces handed out on the strength of the result
ResultsGathered by team and by person
Goes withMailbox Defense with Training, or stands alone
Measured inUser, each month
Readingper user
charged ahead of each month
QTY
Where this plate stops

The honest edge of these 2 lines.

Written down in advance, so the question of what else the estate needs gets asked now and not in the middle of something.

  • Guarding the message is not guarding the account. Stopping the mail is a different job from protecting the credential behind it. Second factor enforcement, conditional access and sane administrator hygiene remain yours to run, and no mailbox rate stands in for any of them.
  • Somebody is still going to click. Rehearsal shifts the numbers, sometimes substantially. It does not render a workforce immune, and a provider quoting you the rate it will fall to is guessing. Plan on the footing that a message will eventually be acted upon.
  • Only the tenants you connect are covered. Mailboxes inside a tenant nobody connected are not protected by this. In groups running more than one tenant after an acquisition, that is reliably the detail that slips.
  • Your mail is not read for our benefit. Inspection exists so the product works. Nothing in a message gets mined, profiled or traded, and that is a standing position rather than the current setting of a preference.
  • Fraud that never touches a mailbox is out of range. A telephone call to your accounts team, a compromised supplier portal, or a forged document delivered by some other route sits outside what these two lines can observe. Verification procedure is the control there, and it is not something anybody sells by the unit.
BEFORE YOU PAY

Heads up: card statements show FORTIFY 24X7 - Iconic IT Innovations is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.