A Fortify 24x7 brand. Gauges, hourly readings and a watch desk kept for smaller firms.Client sign inReach the desk
CyberThreat Management
Front 03 / Mailbox watch

Most trouble arrives politely, in writing, from somebody you know.

Being broken into is rare for a small firm. Being asked is not. An invoice carrying fresh bank details. A supplier who needs paying today, urgently. A note from the owner, sent while the owner is demonstrably on a plane. This front hangs a gauge inside the mailbox and sharpens the judgement of whoever reads it.

IronscalesWithin the tenantPractice on a cadence
Two lines. Protection at mailbox level, plus the practice that goes with it.
Lines posted2
Read byIronscales
UnitMailbox or user
SitsWithin your mail tenant

Within the tenant, and not ahead of it

Ironscales runs at mailbox level, connected over an API, and gateway is a word that does not apply. The distinction earns its keep. Mail on the way in is what a gateway inspects, and about a note already resting in a mailbox it can say nothing, nor about one colleague writing to another, nor about an account taken over and now writing from inside.

Joining over API means protection that reads mail already delivered, that can reach every mailbox at once, and that can withdraw a message from all of them the moment one person reports it. Mail routing also stays untouched, no new public record is needed, and removing the connection later breaks nothing.

Being broken into is rare for a small firm. Being asked is not.

People form part of the instrument

Whether a request is genuine gets decided last of all by a person, and that is the final gauge in the chain. Annual training against a compliance box does not shift it. Short practice, repeated, against shapes your trade actually receives, does.

Movement over time is the reading worth watching, not a headline pass rate. We will show you the trend and we will not present a single month as a result.

Lines on this front

Line records and rates

Every rate here is drawn from billing as the page renders. Anything you log stays in the observation log while reading continues.

Fortify-FES+SATLine record

Mailbox Defense with Training

Ironscales within the tenant, practice attached

Cover living inside the mail tenant instead of ahead of it, plus short practice for the people whose judgement is the last gauge in the chain.

  • Ironscales joins over an API, so it reads mail already delivered to the mailbox.
  • Impersonation and takeover shapes get read against your own tenant, not a generic model.
  • Staff can report a suspect message, and one report pulls that message out of every other mailbox.
Observed atInside the Microsoft or the Google mail tenant, mailbox by mailbox
ForecastsMessages shaped like impersonation, like invoice fraud, or like an account gone over
ArchivedReported messages and their outcome, kept while the line runs
Issued byIronscales, running at mailbox level on an API connection, which is not a gateway
Confirmed atThe Fortify 24x7 desk, for whatever a rule cannot settle alone
Readingper mailbox
charged up front, each monthQTY
Fortify-SATLine record

Phishing Simulation and Training

Ironscales simulation, with short assigned training

Practice, run to a schedule, so the reading on staff judgement comes from behaviour rather than an annual quiz nobody remembers sitting.

  • Simulated messages sent at a cadence you choose, in shapes your trade genuinely receives.
  • Brief training assigned to the people whose clicks say they want it, rather than to everybody.
  • Reporting shows movement over time, the only figure here worth acting upon.
Observed atThe people on your staff list, through simulated messages
ForecastsWhich roles are likeliest to act on a convincing request
ArchivedSimulation results and training completion, kept while the line runs
Issued byIronscales
Confirmed atYour own reporting, gone through with the Fortify 24x7 desk on request
Readingper user
charged up front, each monthQTY
Honest scope

Where this front stops

Mail is where most losses begin, so being exact about these two lines is worth the space.

  • Nothing catches every message. No product sold anywhere does, ours included. A convincing request from a genuinely compromised supplier reads as legitimate to a person and to a machine alike. Payment procedure is the control there, not a filter.
  • It protects mailboxes, not payments. Ringing a number you already held, to confirm a change of bank details, is a business process. It is also the cheapest control there is against the loss this front aims at, and no subscription can perform it on your behalf.
  • Only what you connect is covered. A shared mailbox nobody mentioned, or a second tenant one department quietly uses, stays outside the line until it gets connected.
  • Training reports are about your staff. Those numbers will not be presented as a security score for your firm. They measure practice, they shift slowly, and grading people on them rewards the wrong behaviour.
  • It is not archiving. Keeping mail for retention or for discovery belongs on the backup front. This line inspects. It does not preserve.
NOTICE 01

Heads up: card statements show FORTIFY 24X7 - CyberThreat Management is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Front 01Detection watchFront 02Execution controlFront 03Mailbox watchFront 04Device fleetFront 05Data exposureFront 06Backup and continuity
Every published lineSix instrumentsClient portalOpen the rate card