A Fortify 24x7 brand. Controls that carry a written method, a stated scope, and a result you can check.Sign inMail the bench
H2 Tech Systems
Bench 03 / Email security

By the time a message costs you money it is already in the mailbox.

What Ironscales gives you is mailbox-level API protection. It joins your Microsoft or Google tenant from the inside and examines what has already been delivered, internal mail included. The word gateway does not describe it, and borrowing that word would misstate the vantage point and the field of view together.

Ironscales, by APIYour Microsoft or Google tenantNever a gateway
2 lines / mailbox level, over API / explicitly not a gateway
Cells on this bench2
KitIronscales, on its own
UnitOne mailbox, or one user
ConnectionAPI, within your own tenant

Where a control stands decides what it can see

An opinion gets formed during delivery, and then a gateway goes quiet. Mail travelling any other road never meets it at all: forwarded between colleagues, sent from an account now under somebody else's control, or landed during the window before a rule existed. Joining over API seats the control within the tenant, where delivered mail remains readable and every copy of it remains reachable.

Reach is also what makes cleanup quick. When one message turns out badly, withdrawing it from all the mailboxes it landed in is a single instruction rather than a negotiation with whoever administers the mail platform.

Examination happens after delivery, and that is exactly where costly messages have always been found.

Measuring people, then teaching the ones it points at

A simulation is an experiment with a result. You learn how your own staff handle a persuasive message, and coursework then goes to the people the result identifies instead of to the whole company once a year in November. The combined line carries both halves.

Sometimes the gap really is only human, which is why the training line carries its own price. Buying defense twice over helps nobody, so the pieces are priced apart rather than rounded up into a bundle.

Cells on this bench

Specifications and figures

Every figure below is taken from billing as this page loads. Whatever goes onto the tray remains there while you read on.

Fortify-FES+SATCell

Mailbox Defense with Training

Inside the tenant, over API, by Ironscales

Ironscales attaches by API to whichever tenant you run, then examines whatever has already landed in the mailbox, internal messages included. Mailbox-level API protection sits at a different vantage point than any gateway, and that word will not be borrowed here, since position governs what a control can possibly see.

  • Spam, virus, URL defense, attachment sandboxing and business email compromise detection.
  • Impersonation and takeover signals calibrated against your own tenant.
  • Awareness training carried inside the line instead of quoted separately.
Runs onWhichever mail tenant you run, joined by API
Reacts toMessages already delivered, internal senders included
Shelved forTenants where one persuasive message would be enough
Cleared byBad messages withdrawn from every mailbox at once
Assayed byCounted per mailbox, each month
Weighingper mailbox
charged monthly, in advance
QTY
Fortify-SATCell

Phishing Simulation and Training

Campaigns and awareness training, by Ironscales

Send the test, record the result, teach the people the result points at. Take this line alone when the mail itself is already defended and what remains uncontrolled is habit.

  • Phishing tests without a cap, run as scheduled campaigns.
  • Reporting that names improvement, not only failure.
  • Coursework handed out by result, so nobody repeats material they passed.
Runs onYour existing tenant, people enrolled by address
Reacts toWhat each person does with a planted message
Shelved forOffices whose mail is guarded but whose habits are not
Cleared byResults read through with you, not parked in a console
Assayed byCounted per user, each month
Weighingper user
charged monthly, in advance
QTY
Honest scope

Where this bench stops

Mail is where smaller companies actually lose money, so precision about the reach of these two lines earns its paragraph.

  • Gateway is the wrong noun. An API connection seated within your tenant is what this is. Where a perimeter appliance is specifically what somebody asked for, this is a different control, and hearing so today beats hearing so at renewal.
  • No filter stops everything. What improves is the proportion caught and the minutes between a bad message and its removal from every mailbox. A mailbox does not become a vault.
  • Habits move slowly. Simulation hands you a repeatable measurement of behaviour. It does not produce staff who never click. Treat any percentage claiming otherwise with suspicion.
  • The mailbox is the boundary. Enrolled mailboxes are covered. A private address being used for company business stands entirely outside this bench.
  • Your tenant, your instruction. We join with your authorisation and act inside what you have asked for. Mail is examined in order to defend it, and never for any other purpose.
Label 01

Heads up: card statements show FORTIFY 24X7 - H2 Tech Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.