A Fortify 24x7 brand. Security operated for the plant, the depot, and the offices behind both.Sign inRaise a job
Industry LockNetworks
Bay 03 / Mailbox defense

The message is already in the mailbox by the time it matters.

Almost every convincing attempt at your accounts team arrives as ordinary mail from a real, working account somebody else owns. It passes authentication because it is genuine. This bay puts protection inside the tenant rather than ahead of it, and adds training aimed at whoever the results say needs it.

IronscalesAPI connectedNot a gateway
Every tag in this bay carries its own counting unit
Tags in this bay2
Plant on the lineIronscales
One unit equalsThe mailbox, or the user
WiringAPI, inside your own tenant

Inside the tenant, ahead of nothing

The connection is an API connection into your Microsoft 365 tenant or your Google Workspace tenant. There is no mail record to change, no relay to move, and nothing sitting between your suppliers and your inbox waiting to be misconfigured on a Friday. Delivered mail is what it examines, and it can go back into a mailbox and remove a message after the fact.

That distinction matters, so here it is exactly: mailbox-level protection, connected by API. It protects at the mailbox and is not a gateway, so we will not describe it that way. If somebody has sold you a gateway before and it behaved differently, that is because it was a different thing.

Training that follows the result rather than the calendar

Awareness training normally happens once a year, to a slide, in a room, because somebody has to record that it happened. Simulations run continuously instead, and the short modules go to whoever the results say actually needs them.

Reporting breaks down by person, by site, and by department, which matters when your head office and your third shift at a depot two hundred miles away are very different populations with very different exposure.

The invoice that reroutes your payments will look exactly like the twelve that did not.
Tags in this bay

Specifications and rates

Every rate on this page comes live off the billing service. Anything locked on stays on the worklist while you read on.

Hasp open, tags below
Fortify-FES+SATDanger tag

Mailbox Defense with Training

Plant · Ironscales, wired into your own tenant over API

Protection lives in the tenant here, not ahead of it. A message already delivered still gets examined, and the training beside it leaves your staff harder to talk round.

  • Ironscales connects over API. It protects at the mailbox and is not a gateway, so we will not describe it that way.
  • Impersonation detection and account takeover detection, both tuned to your own tenant.
  • Simulations and short coursework, aimed at whoever the results say needs them.
Mounted onIronscales, connected by API to the Microsoft or Google tenant
IsolatesA message already sitting in the mailbox, pulled back out of it
Retained forMail findings and training results, to your tenant policy
Released byA Fortify 24x7 engineer restoring a message held wrongly
Signed off byThe mailbox owner, on release, and the engineer who released it
Readingper mailbox
settled one month aheadQTY
Fortify-SATDanger tag

Phishing Simulation and Training

Plant · Ironscales, running the simulation and the coursework

Training by itself, where a team already runs a mail product it means to hold on to. Simulations go out, the results come back, and coursework follows whoever turned out to need it.

  • Campaigns go out on a rota, not annually in the fortnight before an audit.
  • Short modules assigned automatically from what the simulation showed.
  • Reporting by person, by site, and by department for whoever owns the programme.
Mounted onIronscales, addressed to the users you nominate
IsolatesA habit, before the message with real intent behind it arrives
Retained forCampaign and completion records, kept while the programme runs
Released byNothing is held. This line sends and measures, it does not block
Signed off byWhoever owns awareness training on your side, on the report
Readingper user
settled one month aheadQTY
Honest scope

Where this bay stops

Mail protection is the highest-yield control most industrial businesses can buy, and it still has an edge. Here it is.

  • It covers the tenant, not the whole of email. Protection reaches the mailboxes you connect, in a Microsoft 365 tenant or a Google Workspace tenant. A mail system running somewhere else, or a shared address on a plant server, sits outside it.
  • No product catches every message. A well-built impersonation of a supplier you have paid for nine years will get past anything on the market. The controls that stop the loss are a callback on changed bank details and two signatures on a payment run.
  • Training reduces the rate. It does not zero it. People under time pressure click things. The measure worth watching is whether reporting goes up, not whether clicking reaches zero, because it will not.
  • Your mail is not read here out of curiosity. Content is inspected only to find threats. It is not mined, not profiled, and not sold. Treat that as a settled position and not as this year's.
  • It does not archive anything. This bay defends the mailbox. A copy of the contents belongs to the backup and continuity bay, and the two do not substitute for one another.
Money side

Heads up: card statements show FORTIFY 24X7 - Industry Lock Networks is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Bay 01Detection and responseBay 02Execution controlBay 03Mailbox defenseBay 04Device fleetBay 05Data protectionBay 06Backup and continuity
All 24 lines The six baysClient portal Open the board