Posted and provisioned by Fortify 24x7. Protection standing over the ground American businesses built.Your stationReach the crew
Red White and Blue Networks
District 03 / Mail protection

Almost nobody breaks in. They write in, and somebody answers.

The mail problem is not really a mail problem. It is a trust problem that arrives by mail: a message shaped exactly like the ones your people answer forty times a day, from a name they know, asking for something ordinary. Two posts here, one aimed at the message and one aimed at the habit.

IronscalesMicrosoft or GoogleDrills and training
2 posts / mailbox level / per mailbox or person
Posts on this guide2
Runs onIronscales
Joins byVendor API, inside the tenant
Billed perMailbox or person

Inside the mailbox, not standing in front of it

Ironscales joins at the mailbox through the vendor API. Gateway is not what that is, and the difference is the whole point. Nothing gets re-pointed, no MX record moves, and mail never detours through a third company on its way to you. The tie goes into Microsoft 365, or else into Google Workspace, and it reads what already sits in the mailbox.

That distinction earns its keep on the worst morning. A gateway sees a message once, as it goes past. Something reading from inside the tenant can go back afterward and lift a message out of every mailbox that took delivery, once the world has worked out what it was.

A gateway gets one look. Something inside the tenant can go back for it.

The half that was never software

Every honest account of this subject says the same thing: the message that works is the one that looks routine. No filter catches all of those, because a request to change bank details is not malformed. It is simply wrong, and only a person who has practiced can tell.

So the second post drills people. Short simulations sent on a normal cadence, followed by two minutes of training aimed at whoever needed it rather than a yearly hour aimed at everybody. The point is not a score on a report. The point is a company where somebody feels comfortable picking up the phone to ask.

Posts on this guide

Detail and rates

Each rate below comes from billing the moment the page opens. Anything under this district drops into your roster while you read on.

Fortify-FES+SATPost detail

Mailbox Defense with Training

Joined at the mailbox by Ironscales, with drills included

Protection joined to the mailbox itself, plus the drilling and short training beside it, sold as one post so nobody has to argue about which half to buy.

  • Ties into Microsoft 365, or else into Google Workspace, at the vendor API.
  • Impersonation and stolen account detection, tuned on the mail your company receives.
  • A bad message that already arrived can be hauled back out of whichever mailboxes hold it.
Runs onIronscales
Joins byThe vendor API at the mailbox, with no gateway involved
Works withMicrosoft 365, or else Google Workspace
ClawbackHauls a message out of every mailbox already holding it
DrillingSimulations plus short training for whoever needs it
Billed perMailbox, each month
Pullingper mailbox
charged before the month starts
QTY
Fortify-SATPost detail

Phishing Simulation and Training

Drills and short lessons only, run on Ironscales

Just the drilling, for companies whose mail is already defended and whose people are not.

  • Simulations sent on a normal cadence rather than in one annual burst.
  • Short training assigned to whoever the drill actually caught.
  • Reporting your managers can read without a security background.
Runs onIronscales
ReachesDrills and training, with no mail filtering attached
RhythmRegular simulations rather than one yearly session
LessonsShort, and aimed at the person who needed it
FitsOffices keeping mail protection they already bought
Billed perPerson, each month
Pullingper user
charged before the month starts
QTY
Honest scope

Where this guide stops

Almost everything arrives by mail, and mail is still only one road in. Here is what these two posts do not reach.

  • Gateway is not what this is. Ironscales joins at the mailbox through the vendor API. Where compliance paperwork specifically demands a gateway standing in front of mail, this will not satisfy it, and saying so up front beats saying so later.
  • A person can still be talked into it. Drilling improves the odds. It does not make anybody immune, and a vendor implying otherwise has never watched a good pretext land on a busy Friday.
  • It protects the mail, not the account. Multi factor enrollment, conditional access, and how sign in is configured live in your tenant. We will advise. The switches stay yours.
  • Phone calls and text messages are outside it. The same pretext arrives by phone and by text every week. Nothing on this guide sees either one.
  • Cover follows the licenses you name. Mailboxes left out of the connection are not inspected, and a shared mailbox nobody mentioned is a shared mailbox nobody watches.
MARKER

Heads up: card statements show FORTIFY 24X7 - Red White and Blue Networks is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.