Fraud against a financial practice is overwhelmingly a writing exercise. A message asks for an amended instruction, a countersignature, or a file, phrased in a register the reader has already accepted. Ironscales attaches to Microsoft 365 or to Google Workspace over the tenant API, so it examines mail after delivery, inside the mailbox. This is not a gateway product, and pretending otherwise would be untrue.
A gateway examines mail on the way through and then stops holding an opinion. Anything arriving clean and turning hostile afterwards, anything sent between two colleagues who both sit inside the tenant, and anything a taken over account forwards onward, all sail past a gateway without a second look.
An API attachment keeps looking. It can reach into a mailbox that already accepted a message and withdraw it from every copy, the ones already forwarded internally included. For a practice where one taken over account can issue instructions in a trusted voice, that capability is the entire purchase.
Awareness instruction sits in the rule and is usually bought as a video nobody finishes. What has value is the record: who was tested, how they behaved, and whether the same individual keeps behaving that way.
Simulations run against a calendar, outcomes are reported individually, and short lessons are assigned where the outcomes indicate rather than to the whole firm at once. That record also happens to be the thing you produce when somebody asks how instruction is delivered and how your firm knows it happened.
A message asking for nothing unusual, sent from an account that genuinely belongs to the person named on it, carrying no link and no attachment, is not a technical problem at all. It is a procedural one, and the safeguard is a callback rule on payment instructions that your firm writes down and then insists upon.
It gets mentioned here because it is the failure that empties accounts in this industry, and no mailbox product on sale anywhere closes it.
Rates below are read live from the billing service. Anything you record sits on your order sheet while you carry on reading the rest of the register.
Protection attached to the mailbox over the tenant API, examining mail that has already landed, together with the simulation and instruction programme for whoever is reading it.
| Supplied by | Ironscales |
|---|---|
| Attaches over | The tenant API, examining mail after it has landed |
| Tenants supported | Microsoft 365 and Google Workspace |
| What it spots | Impersonation, taken over accounts, and internal spread |
| What it can undo | Pulls a message back out of every copy it reached |
| Charged against | Each mailbox, every month |
The simulation and instruction programme purchased separately, for a practice already holding mailbox protection it intends to keep but still needing the awareness record its programme calls for.
| Supplied by | Ironscales, awareness programme only |
|---|---|
| What it covers | Simulation, lessons, and the reporting behind both |
| How often | Spread through the year, not a single annual exercise |
| Reporting | Individually and by team, exportable |
| Fits a firm that | Intends to keep the mail protection it already runs |
| Charged against | Each person, every month |
Two columns, both of them written to be relied on. The right hand column is the one worth reading twice, because a firm that misreads it will believe an obligation is covered when it is still open.
Heads up: card statements show FORTIFY 24X7 - Equity IT Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.
Equity IT Solutions raises no separate charge of its own, so a second line will never turn up beside that one.