One approval
Your Microsoft 365 admin approves one connection. InboxGuard runs in the cloud, so employee computers stay exactly as they are and mail keeps flowing the same way.
InboxGuard for Microsoft 365
The guard that stays on watch after the test.
InboxGuard adds onto Microsoft 365 to catch what gets through. Microsoft Defender filters first. InboxGuard takes a second look at every message that lands in your inbox and catches the dangerous ones that slip through, minutes after they arrive.
- 10 checks on every new message
- Microsoft's verdict and ours, side by side
- Daily proof report
INBOXGUARD CATCHEXAMPLE
"Updated wire instructions — please process today"
From: ceo@yourcompany-co.com
LOOKALIKESender domain is one character off from your own
PAYMENTBank-detail change request
PRESSUREUrgent deadline and secrecy language
Microsoft's verdictDelivered to inbox
InboxGuard's verdictFlagged · moved to Junk
Illustrative example of how a catch is shown.
In plain words
How InboxGuard works
Your business email runs on Microsoft 365. InboxGuard is a second guard that sits right behind Microsoft’s filter and catches the scams Microsoft misses.
Microsoft checks first
Microsoft 365’s own filter (Defender) checks every email, just like it does today.
Some scams still get through
Fake invoices, look-alike senders and “urgent payment” emails can still land in the inbox.
InboxGuard checks again
Every email that lands gets a second look with 10 checks: a fake sender? a look-alike web address? pressure to pay?
Dangerous email gets handled
InboxGuard alerts you, or moves it to Junk automatically. You choose which.
A report every day
A daily report shows everything InboxGuard caught. Busy inboxes can get it twice a day, or choose weekly or monthly.
Already on Microsoft 365? InboxGuard adds onto it, so your team keeps the inbox they already know.
Every message, ten checks
What InboxGuard looks for in every email
Each new message is read with its full headers and scored against ten checks drawn from the tricks real scams use every day.
- Sender authenticationSPF, DKIM, and DMARC results verified on every message.
- Brand impersonationMail dressed up as Microsoft, your bank, or a delivery brand gets a hard second look.
- Staff & executive impersonationMail pretending to come from your owners, executives, or finance team gets flagged fast.
- Lookalike domainsOne letter swapped or one character changed, spotted and scored.
- Reply-to mismatchesReply-to and bounce addresses compared against the sender you see.
- Disguised & risky linksShortened, redirected, and look-alike links unwrapped before anyone clicks.
- Pressure languageUrgent demands, hard deadlines, and secrecy pressure raise the score.
- Payment & secrecy requestsBank-detail changes and gift-card asks get extra scrutiny.
- Risky attachmentsAttachment types known for carrying booby traps are treated with suspicion.
- First-time sendersA first email from a new sender earns a closer look, especially when it asks for money.
Why testers recommend it
Testing finds the gaps. InboxGuard keeps watch.
A penetration test shows where you stand on the day of the test. Social engineering tests are built on one simple idea: a convincing email only needs one click. Defender filters at the gate. InboxGuard re-checks what reached the inbox, the exact spot where impersonation and lookalike scams do their damage.
- Second look: every delivered message re-checked after arrival
- People first: extra protection for executives and finance staff
- Your choice: monitor and alert, or auto-junk the dangerous mail
- Feedback that helps Defender: with your OK, missed phish are reported back to Microsoft
Up and running in three steps
How InboxGuard goes to work
Around the clock
Every new message in every protected inbox is read with its full headers and scored against the ten checks.
Alerts and proof
Dangerous mail raises an alert right away, and in auto-junk mode it moves straight to Junk. A daily report shows everything InboxGuard caught.
Questions
InboxGuard questions, answered
Does InboxGuard replace Microsoft Defender?
InboxGuard works alongside Defender. Defender filters at the gate, and InboxGuard adds a second look after delivery, with both verdicts shown side by side on every catch.
Does anything change on our computers?
Employee computers stay exactly as they are. Your Microsoft 365 admin approves one connection, and InboxGuard runs in the cloud.
Can it move dangerous mail automatically?
Yes. Choose monitor-and-alert or auto-junk, set the score thresholds, and name the executives and finance staff to protect.
What proof do we get?
Every day, a clear report lists each catch, ready to hand to owners, auditors, or your insurance carrier. Twice-daily, weekly and monthly reports are available too.
More services
Other penetration testing services
Web Application Penetration Testing
Learn more →Network Penetration Testing
Learn more →Social Engineering & Phishing Tests
Learn more →
Free 30-minute scoping call
Request your free penetration testing consultation
Tell us about your environment. A senior tester will reply within 24 hours with scope options and a fixed-price quote. No obligation.
- Fixed-price quote before any work begins
- Mutual NDA available on request
- Written rules of engagement and testing windows you approve
We're open 24/7. Prefer to talk now? Call (813) 546-1402