Fraud aimed at a financial practice rarely arrives looking hostile. It arrives as a revised set of instructions from a name the recipient already trusts. These two entries put detection inside the mailbox where that message lands, and put short instruction in front of the people most likely to be asked.
A gateway stands in front of the mail service and inspects traffic passing through it. There is a hole in that arrangement: it never sees what is already resting in a mailbox, and it never sees a message one colleague sends another. Ironscales joins the mail tenant itself over an API, Microsoft 365 and Google Workspace alike, and reads a message once it has arrived. Both holes close.
This is protection living at the mailbox, reached over an API, and explicitly not a gateway. The distinction matters the moment somebody asks what changes about mail routing, because the truthful answer is nothing whatsoever. No rerouting. No new entry in your public naming.
A convincing pretext gets past a filter by being unremarkable. What remains is the person reading it, and whether anything in their week has taught them to slow down at precisely the point where a payment instruction changes.
Instruction goes out by result rather than to the whole practice on a single afternoon. Somebody who clicks gets a short module that week. Somebody reporting a genuine attempt improves the tenant for everybody else. It is a small loop, and the only part of this session that improves without us touching anything.
Billing hands over every figure below at page load. Present while you read; a quantity stands until you alter it.
Ironscales reaches into the tenant by API, Microsoft 365 and Google Workspace alike, and reads a message once it has landed. Protection living at the mailbox, reached over an API, and explicitly not a gateway; we decline to blur those two.
| Settles on | Ironscales, attached by API to your mail tenant |
|---|---|
| Nets | One mailbox, protection and instruction on a single unit |
| Value date | Opens the moment the tenant grant is accepted |
| Cleared by | Fortify 24x7 engineers, assisted by your own reporters |
| Reconciled by | Conviction history and instruction completed, person by person |
For anybody wanting the practice without a mailbox on the protection entry: contractors, seasonal preparers, and whoever reads practice mail from an address you do not host.
| Settles on | Ironscales instruction, with no mailbox connection required |
|---|---|
| Nets | One person under instruction, simulations and modules together |
| Value date | The opening campaign can run inside enrollment week |
| Cleared by | Fortify 24x7 sets the campaigns and reads what comes back |
| Reconciled by | Dated completion records, handable across a table |
Two entries, each with a visible edge. What follows is what they will not do.
Heads up: card statements show FORTIFY 24X7 - FinShield Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.