Email security
Integrated Cloud Email Security (ICES) and Secure Email Gateways (SEG) detecting phishing, business email compromise (BEC), malicious attachments, and account takeover.
Key Technical Considerations Before Procuring
Modern cloud-native email security utilizes Microsoft 365 and Google Workspace APIs to inspect messages post-delivery and pull malicious emails from user inboxes retroactively, without requiring MX-record changes.
Documented Solutions in this Category
Showing 29 published solutions with verified evidence
Proofpoint Threat Protection
Advanced email security platform delivering inbound threat filtering, NexusAI machine learning analysis, BEC defense, and URL/attachment sandboxing.
Mimecast Email Security Cloud Integrated
Cloud-integrated email security solution offering rapid API-based deployment into Microsoft 365 with AI-powered inbound and internal protection.
Abnormal Inbound Email Security
Abnormal Inbound Email Security from Abnormal AI focuses on behavioral email threat detection and account protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Behavioral business-email analysis: Examines email context and communication patterns to identify threats that can evade basic attachment filtering. - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. - Behavioral email analysis: Uses communication behavior or contextual signals in email threat analysis. Use and operational context Abnormal Inbound Email Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Abnormal Inbound Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Barracuda Email Protection
Barracuda Email Protection from Barracuda Networks focuses on email threat detection and message protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Barracuda Email Protection is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Barracuda Email Protection focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Harmony Email and Collaboration
Harmony Email and Collaboration from Check Point focuses on email and collaboration threat protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Message remediation: Supports handling messages identified as suspicious or malicious. Use and operational context Check Point's email and collaboration entry addresses threats reaching users through supported productivity services. Establish the services included in the selected package and review how protection, account context and message remediation fit the organization's administration workflow. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Harmony Email and Collaboration focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cisco Secure Email
Cisco Secure Email from Cisco focuses on email threat detection and message protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Message threat filtering: Applies the documented threat filtering to messages handled by the email security deployment. - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Message remediation: Supports handling messages identified as suspicious or malicious. Use and operational context Cisco Secure Email is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cisco Secure Email focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Email Security
Cloudflare Email Security from Cloudflare focuses on email phishing and impersonation protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Cloudflare Email Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cofense Managed Phishing Detection and Response
Cofense Managed Phishing Detection and Response is a managed security service offered by Cofense. Its documented scope centers on managed phishing investigation and response. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Message remediation: Supports handling messages identified as suspicious or malicious. - User-reported email triage: Helps security teams assess messages escalated by employees. Use and operational context Cofense's managed phishing service handles the investigation and response workflow for reported email threats. Review how messages are submitted, how the provider determines a disposition and which containment or remediation actions are included in the agreed service. Deployment and evaluation Deployment: Managed service with provider-led monitoring and response within the agreed service scope. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cofense Managed Phishing Detection and Response focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cofense Triage
Cofense Triage from Cofense focuses on reported email investigation and phishing triage. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Message remediation: Supports handling messages identified as suspicious or malicious. - User-reported email triage: Helps security teams assess messages escalated by employees. Use and operational context Cofense Triage addresses the security team's review of reported messages. Evaluate how analysts assess a submitted email, add investigation context and record a disposition, with a clear handoff to the people or tools responsible for remediation. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cofense Triage focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Darktrace / EMAIL
Darktrace / EMAIL from Darktrace focuses on email threat detection and phishing protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. - Behavioral email analysis: Uses communication behavior or contextual signals in email threat analysis. Use and operational context Darktrace / EMAIL is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Darktrace / EMAIL focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
ESET Cloud Office Security
ESET Cloud Office Security from ESET focuses on cloud email and collaboration protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Message remediation: Supports handling messages identified as suspicious or malicious. Use and operational context ESET Cloud Office Security addresses threats in the supported cloud productivity services. Establish which mailboxes, files and collaboration services are covered, then review how an identified threat is handled without disrupting legitimate business communications. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? ESET Cloud Office Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiMail
FortiMail from Fortinet focuses on email threat filtering and message protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context FortiMail is Fortinet's email protection entry. Review the chosen message-processing architecture, protection policy and administrator workflow, then test how the system handles both a suspicious message and a legitimate message with similar business characteristics. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiMail focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
FortiMail Workspace Security
FortiMail Workspace Security from Fortinet focuses on threat protection for email and collaboration applications. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Collaboration application protection: Extends the documented protection scope beyond email into supported collaboration services. - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. Use and operational context FortiMail Workspace Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiMail Workspace Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Glasswall Embedded Engine
Glasswall Embedded Engine from Glasswall focuses on software development kit for integrating file content disarm and reconstruction. It is file reconstruction software development kit used for integrating content disarm and reconstruction into another application. Capabilities - Embedded file reconstruction SDK: Provides a software development kit for integrating the documented file-reconstruction controls into another application. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File policy controls: Applies configurable decisions to the files or content types processed by the product. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context Glasswall Embedded Engine is relevant to developers adding file protection to an intake or processing workflow when the requirement centers on integrating content disarm and reconstruction into another application. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review supported file types, SDK interfaces, policy behavior and preservation of legitimate document content. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Glasswall Embedded Engine focuses on integrating content disarm and reconstruction into another application. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Glasswall Genesis
Glasswall Genesis from Glasswall focuses on file content disarm and reconstruction engine with policy controls. It is file reconstruction engine used for processing supported files under granular content security policies. Capabilities - Policy-controlled file reconstruction: Implements file reconstruction using the granular content policies described by Glasswall. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File policy controls: Applies configurable decisions to the files or content types processed by the product. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context Glasswall Genesis is relevant to teams operating controlled document processing when the requirement centers on processing supported files under granular content security policies. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review supported content, policy settings, processing performance and the fidelity of reconstructed files. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Glasswall Genesis focuses on processing supported files under granular content security policies. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Glasswall Halo
Glasswall Halo from Glasswall focuses on server-based file content disarm and reconstruction. It is server-based file reconstruction technology used for processing files through a centrally deployed content disarm and reconstruction service. Capabilities - Server-based file reconstruction: Provides the documented server deployment for processing files through content disarm and reconstruction. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File policy controls: Applies configurable decisions to the files or content types processed by the product. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context Glasswall Halo is relevant to teams securing shared file intake and processing when the requirement centers on processing files through a centrally deployed content disarm and reconstruction service. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review deployment topology, file formats, integration interfaces and validation using representative business documents. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Glasswall Halo focuses on processing files through a centrally deployed content disarm and reconstruction service. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Glasswall Meteor
Glasswall Meteor from Glasswall focuses on desktop file content disarm and reconstruction. It is desktop file reconstruction technology used for applying content disarm and reconstruction to files in a desktop workflow. Capabilities - Desktop file reconstruction: Applies the documented desktop workflow to files handled on local or connected storage. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File policy controls: Applies configurable decisions to the files or content types processed by the product. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context Glasswall Meteor is relevant to teams handling local or connected files that require content protection when the requirement centers on applying content disarm and reconstruction to files in a desktop workflow. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review desktop deployment, file location coverage, processing policy and the usability of reconstructed documents. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Glasswall Meteor focuses on applying content disarm and reconstruction to files in a desktop workflow. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
365 Total Protection
365 Total Protection from Hornetsecurity focuses on cloud email protection and security management. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Message remediation: Supports handling messages identified as suspicious or malicious. - Email retention and search: Preserves and searches message data for the retention or investigation use cases described by the vendor. Use and operational context 365 Total Protection is organized around protection for Microsoft 365 business use. Assess the email, account and information-protection functions in the selected package together, and establish which administration tasks remain with the customer's Microsoft 365 team. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? 365 Total Protection focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
IRONSCALES Email Security
IRONSCALES Email Security from IRONSCALES focuses on mailbox threat detection and remediation. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context IRONSCALES Email Security addresses investigation and protection around mailbox threats. Assess how suspicious mail is identified and reviewed, which remediation actions are included in the deployment and how the security team receives context from employee reporting. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? IRONSCALES Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Graphus
Graphus from Kaseya focuses on cloud email phishing protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. Use and operational context Graphus is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Graphus focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
PhishER
PhishER from KnowBe4 focuses on reported email triage and remediation. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. - User-reported email triage: Helps security teams assess messages escalated by employees. Use and operational context PhishER is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? PhishER focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Mimecast Cloud Archive
Mimecast Cloud Archive from Mimecast focuses on email retention and archive search. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Archived correspondence search: Supports locating message records within the archive available to an authorized user. - Retention and e-discovery workflows: Supports the documented retention and investigation requirements for archived email information. - Email retention and search: Preserves and searches message data for the retention or investigation use cases described by the vendor. Use and operational context Mimecast Cloud Archive is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Mimecast Cloud Archive focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Mimecast Email Security
Mimecast Email Security from Mimecast focuses on email threat detection and phishing protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Email retention and search: Preserves and searches message data for the retention or investigation use cases described by the vendor. - User-reported email triage: Helps security teams assess messages escalated by employees. Use and operational context Mimecast Email Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Mimecast Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
MetaDefender Core
MetaDefender Core from OPSWAT focuses on file threat scanning and content sanitization. It is file inspection and sanitization technology used for evaluating and processing files through the selected threat-inspection engines. Capabilities - Multiengine file scanning: Combines the file inspection engines documented for the selected MetaDefender configuration. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context MetaDefender Core is relevant to teams securing incoming files or application uploads when the requirement centers on evaluating and processing files through the selected threat-inspection engines. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review enabled engines, supported content, scanning and transformation policy and how results affect the file intake workflow. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? MetaDefender Core focuses on evaluating and processing files through the selected threat-inspection engines. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
MetaDefender Kiosk
MetaDefender Kiosk is a hardware security product from OPSWAT, focused on portable media inspection and threat prevention. Capabilities - Portable-media intake screening: Applies the documented inspection workflow to files arriving through removable media. - Content disarm and reconstruction: Processes supported files using the vendor's disarm-and-reconstruction method to reduce content-borne risk. - File policy controls: Applies configurable decisions to the files or content types processed by the product. - File inspection workflows: Brings file handling into the documented threat inspection workflow. - Application integration: Provides the documented mechanism for integrating file protection into an application or service. Use and operational context MetaDefender Kiosk is relevant to teams controlling physical file intake when the requirement centers on checking removable-media content before it enters a protected environment. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical hardware device; integration requirements depend on the selected model. Before adoption, review media support, inspection policy, treatment of detected content and records of approved file transfer. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? MetaDefender Kiosk focuses on checking removable-media content before it enters a protected environment. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Email Protection
Email Protection from Proofpoint focuses on email filtering and targeted attack protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Account takeover detection: Brings signs of compromised email or cloud accounts into the investigation workflow. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Proofpoint Email Protection addresses the protection and handling of organizational email. Review the message path, threat inspection and policy outcome together, including how administrators investigate a flagged message and restore a legitimate message when necessary. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Email Protection focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Sophos Email
Sophos Email from Sophos focuses on email threat protection and phishing defense. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Sophos Email is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Sophos Email focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
ArcTitan
ArcTitan from TitanHQ focuses on email archiving and message search. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Archived message search: Lets authorized users find correspondence within the email archive covered by the deployment. - Email retention administration: Applies the retention settings documented for stored email records. - Archive administration: Provides the documented workflow for maintaining the organizational email archive. - Email retention and search: Preserves and searches message data for the retention or investigation use cases described by the vendor. Use and operational context ArcTitan is an email archiving product. Its practical value is assessed through message capture, retention administration and the ability to find required correspondence, with access controls and export requirements included in the organization's retention review. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? ArcTitan focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
SpamTitan
SpamTitan from TitanHQ focuses on email spam filtering and phishing protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. - Email retention and search: Preserves and searches message data for the retention or investigation use cases described by the vendor. - Behavioral email analysis: Uses communication behavior or contextual signals in email threat analysis. Use and operational context SpamTitan is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? SpamTitan focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.