A gateway inspects mail on the way in and then stops having an opinion. Ironscales gives mailbox-level API protection. A gateway it is explicitly not: the connection sits inside your own tenant and keeps looking, so a link that turned hostile an hour after delivery can still be lifted out of each inbox that took it.
Most of what actually costs money in a small firm is not malware. It is a message wearing the face of a supplier, a landlord or the owner, asking for something completely ordinary. There is no attachment to scan and no obviously bad link to block, which is precisely why a gateway waves it onward and thinks no more about it.
Sitting inside the tenant changes what is possible. The protection learns who normally writes to whom, spots a reply address quietly at odds with the display name, and can reach into each inbox that took a message and lift it back out. It also sees internal mail, which a gateway never does, and internal mail is how a compromised account does its damage.
Practice attempts land in real inboxes dressed as the mail your trade actually receives: a delivery note, an invoice, a password expiry. Whoever clicks gets a couple of minutes of teaching right then, at the one moment anybody remembers it.
Reporting shows which teams are improving without turning any of it into a league table. The point is a workforce that pauses over an unusual request, not a wall chart naming people who once had a bad Tuesday.
Figures underneath come straight from billing when this page opens. Whatever you set falls into the composing stick and sits there until you are done reading.
Protection seated in the mailbox, not stationed ahead of it. What Ironscales runs is mailbox-level API protection, with explicitly no gateway anywhere in it, and that is exactly why it can still deal with something delivered an hour earlier that only later turned out to be trouble.
| Set on | Ironscales, running mailbox-level API protection, explicitly no gateway |
|---|---|
| Prints | Removal of a bad message, plus a note of where it went |
| Standing type | A tenant connection that keeps watching after delivery |
| Locked by | Policy you agree, tuned against your own traffic |
| Proofed by | Practice run results, and what your people did with them |
Training by itself, for a firm whose mail is looked after elsewhere. Convincing practice attempts turn up, and whoever clicks gets a couple of minutes of teaching at the one moment it sticks.
| Set on | Ironscales |
|---|---|
| Prints | Attempts, results, and a short lesson wherever one is due |
| Standing type | A programme that rolls, rather than one session a year |
| Locked by | A schedule agreed with you and then left running |
| Proofed by | Click and report rates you can watch shift over months |
Mail is the route most losses at this size arrive by, and no product shuts it completely. Marked up here is where both lines honestly stop.
Heads up: card statements show FORTIFY 24X7 - SecureBiz IT is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.