A Fortify 24x7 brand. Security engineering for the companies that build things.Client sign inTalk to an engineer
EagleTech Innovations
Sheet 06 / Inbox defense

The most expensive message your company receives will look entirely ordinary.

It will not have a suspicious attachment or a misspelled domain. It will be a short note about an invoice, from an address your team has corresponded with for a year, arriving in a week when everybody is busy. Email is where most real losses begin, and it is the cheapest place to put a control.

IronscalesAPI connectedSimulation and training
2 lines / inside the tenant / mailbox level
Lines on this sheet2
PlatformIronscales
Rate basisMailbox or user
ModelAPI, not a gateway

Inside the tenant, not in front of it

This matters, so we are going to be precise about it. Ironscales is not a mail gateway. There is no record to repoint and no queue standing between the internet and your tenant. It attaches to a Microsoft or Google tenant over the API and operates down at mailbox level, which is why it can still act on a message that already arrived.

That distinction has a practical consequence. When a campaign is recognized an hour after it landed, the offending messages can be pulled out of every mailbox that received them. A gateway cannot do that, because by then the mail is behind it. It also means deployment does not touch your mail flow, so there is no cutover night and no window where mail queues while somebody watches a graph.

There is no cutover night, because there is nothing standing in front of your mail.

Training that is not an annual video

The training line is here because the control that gives way is usually a person having a bad afternoon. Simulations are sent, the people who click get short targeted training rather than an hour of compliance footage, and reporting a suspicious message becomes a normal thing to do rather than an admission.

For a small company the reporting habit is worth more than the click rate. A team that forwards odd messages to our desk gives us an early signal on a campaign that no filter caught yet.

Lines on this sheet

Specifications and rates

Prices below are pulled straight out of billing. Anything you add sits in your basket while you carry on reading.

Fortify-FES+SATSpecification

Mailbox Defense with Training

Ironscales, connected by API, training bundled in

Mailbox level email security wired into a Microsoft or Google tenant over the API, bundled with the phishing simulation and training program for the same people.

  • Inspects mail that has already been delivered and can remove it after the fact.
  • Impersonation and account takeover detection tuned against your own tenant.
  • Simulation and short training assigned to the people who need it.
  • Reported messages reach our desk, which is often the earliest warning we get.
PlatformIronscales
ConnectionAPI into a Microsoft or Google tenant
ModelMailbox level. This is not a gateway
RemediationRemoval of a campaign from mailboxes after delivery
IncludedPhishing simulation and training for covered users
Rate basisMailbox, monthly
Fetchingper mailbox
billed monthly, up front
QTY
Fortify-SATSpecification

Phishing Simulation and Training

Ironscales, running the human half only

Just the training half, for teams keeping the mail security they already own but wanting the human side run properly.

  • Simulations that resemble the messages your industry actually receives.
  • Short targeted training for the people who engage with them.
  • Reporting is normalized, so a suspicious message becomes an easy thing to raise.
PlatformIronscales
ScopeSimulation and training only
ContentShort modules, assigned by behavior rather than by calendar
ReportingPer user and per campaign
Best fitTeams keeping their existing mail filtering
Rate basisUser, monthly
Fetchingper user
billed monthly, up front
QTY
Honest scope

Where this sheet stops

Email security is the area where marketing runs furthest ahead of reality. These are the boundaries.

  • No filter catches everything. A well written message from a genuinely compromised partner account, with no payload and no link, is asking a human to make a judgment. Some of those will arrive.
  • It is no gateway, and calling it one would be a lie. Where a questionnaire or a requirement specifically insists on a secure email gateway in front of the tenant, this line does not satisfy it. Tell us and we will say so plainly rather than argue definitions.
  • Training reduces clicks. It does not eliminate them. Anyone can be caught on the wrong day. Design your approval processes so that one click cannot move money or release a file on its own.
  • It does not back your mailboxes up. Protection and retention are different products. Mailbox backup lives on the backup and continuity sheet.
  • Personal mail is outside it. Coverage follows the mailboxes in your connected tenant. A private address that receives company business is not protected by anything here.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - EagleTech Innovations is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.