Firewalls are not how a smaller business gets reached now. Somebody asks, in a voice already trusted, from a mailbox already inside the building. Both lines here work at the mailbox, because that is where the conversation is taking place.
Ironscales provides protection at mailbox level over the tenant API. A gateway it explicitly is not. That distinction earns its keep. A gateway examines mail arriving from outside and then has no further vote. An API connection can read what has already been delivered, which is the only vantage point from which an internal message sent by a stolen account can be caught.
It also leaves routing alone. No mail record changes, no cutover evening is needed, and there is nothing to unpick if you stop. Permission is granted, and permission can be withdrawn the same way.
A simulation teaches something only when it is unremarkable. Announced once a year, it teaches people how to pass a test. Run continuously and without ceremony, it teaches them what the genuine article looks like on an ordinary Wednesday.
Results come back by person and by team so follow up goes somewhere useful. A leaderboard of who fell for what is not the point, and we would advise against building one.
Every figure below comes out of billing while this page draws. Anything entered waits inside the almanac, and reading on will not disturb it.
Mailbox-level API protection, never a gateway, and the distinction is worth repeating. It seats itself inside whichever tenant you run, Microsoft or Google, and reads mail that has arrived. That vantage point is the only one from which a message forwarded internally by a stolen account can be caught.
| Sighted on | Mailboxes, in whichever of the two tenants you happen to run |
|---|---|
| Tracks | Message content and headers, and how people answered a drill |
| Archived for | Verdicts and drill results held with the tenant while the line runs |
| Resolved by | Automatic remediation in the mailbox, engineers on the exceptions |
| Observed by | Ironscales |
Drills by themselves, where mail defence has already been settled by something else. Phishing simulations land on a rota, not once a year ahead of an audit, and the reporting is there so you can watch whether anything genuinely shifts.
| Sighted on | Named users inside whichever tenant you happen to run |
|---|---|
| Tracks | Who opened, who clicked, who reported, and what shifted afterwards |
| Archived for | Drill results kept while the subscription continues |
| Resolved by | Short assigned training, then another drill |
| Observed by | Ironscales |
Mail defence is a matter of odds, and anybody claiming otherwise is selling. The edges, plainly.
Heads up: card statements show FORTIFY 24X7 - Starlight IT Services is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.