Englishالعربية Soon
Under attack?
Email security · Secure email gateway

Most intrusions still start with a message someone was meant to trust.

Layered filtering in front of the mailbox: phishing and business email compromise, malicious attachments and URLs, QR-code lures, spoofed senders and the quiet spam that trains people to click.

Layered on Microsoft 365

Native filtering is a floor, not a ceiling.

A dedicated gateway in front of or alongside Microsoft 365 catches what native controls let through, while you keep granular control of internal policy, routing and quarantine instead of accepting a vendor default.

Outbound and policy

Control what leaves, not only what arrives.

Outbound content is inspected against your policy: sensitive data blocked or encrypted, attachments controlled, acceptable use enforced, and every decision logged for the auditor who will ask.

Capabilities

What the platform gives you

Requirements we hold any email security platform to before we put it in front of a client.

Phishing and BEC detection

Detection engines trained on credential-harvesting and impersonation patterns, not only on known-bad senders and domains.

URL analysis at time of click

Links rewritten and re-evaluated when the user clicks, because a clean URL at delivery is often armed an hour later.

Attachment sandboxing

Suspicious files detonated in an isolated environment and judged on behaviour before the mailbox ever sees them.

QR code and image threats

Payloads hidden in QR codes and images extracted and analysed, closing the gap that text-only filters leave open.

Spoofing and impersonation control

SPF, DKIM and DMARC enforced, with lookalike domain and display-name detection for your executives and finance team.

Outbound DLP and encryption

Sensitive content detected on the way out and blocked, quarantined or encrypted according to your policy.

Granular policy engine

Rules per user, group, domain, direction and content type, so a legal team and a call centre are not governed identically.

Quarantine and user release

Digest notifications and self-service release for low-risk items, which keeps the volume off your service desk.

Flexible deployment

Cloud, on-premises or hybrid routing, including staged migrations where mail flow changes gradually.

How it works

From inbound connection to a delivery decision you can explain

Each layer removes a class of threat. The last thing you want is one engine carrying all of it.

Microsoft 365Exchange on-premisesHybrid routingGoogle WorkspaceJournalingArchiving
01
Route
MX or connector change puts mail through the gateway, in monitor mode first so nothing is lost during cutover.
02
Filter
Reputation, anti-spam, anti-malware, anti-spoofing and phishing engines applied in sequence to every message.
03
Detonate
Unknown attachments and URLs analysed in a sandbox, and links re-checked at the moment a user clicks.
04
Enforce
Policy applied per direction and per group: deliver, tag, quarantine, block, encrypt or strip.
05
Report
Dashboards show who is being targeted, by what, and how often, which is what shapes your awareness training.
Cutover is reversible. We run the gateway in parallel first and compare its verdicts with what your current filtering delivered.
Delivery model

You own it, we build it

The platform runs in your environment under your licences. We size it, deploy it, tune the policy and train your team to run it.

Learn more →

Delivery model

We run it for you

Our team operates the platform, triages what it raises, investigates and hands you incidents rather than alerts.

Managed SOC →

Related

Controls that work alongside it

Data loss prevention

Email is one channel. The same classification policy should cover endpoints, web and storage.

Security awareness

Reporting from the gateway tells you exactly who to train and on what.

Managed SOC

Reported phishing triaged by analysts, with the mailbox purged across the estate when it is real.

See what is getting through today.

We run a passive assessment against your live mail flow and show you the phishing and BEC your current filtering delivered.