Two lines covering mail. Ironscales attaches to your tenant over its API and works from within a mailbox rather than from a position ahead of it, so routing stays precisely where it stands and a message remains recallable hours after arrival.
A gateway reads mail once, on its way past, and then it is finished with it. Ironscales attaches over the API and lives within the tenant, which buys two things worth the money. Your MX records never move, so no cutover weekend and no relay to keep alive. And where a message looked harmless on arrival, it gets lifted out of the mailboxes holding it the moment it proves otherwise.
That second point carries the weight. A modern campaign sends an innocent link, lets it clear inspection, and only afterwards swaps the destination for something that empties a wallet. Anything that read the message once at the boundary has no way back in. Something living within the mailbox does.
Ordinary phishing is not the difficulty. The mail that works on a crypto team is precise: a support conversation carried on from a genuine ticket, a claim with a countdown attached, a firmware notice pretending to come from a hardware wallet maker, a counterparty asking to confirm a settlement address at short notice.
That is why simulation travels with the mailbox line. Nobody is chasing a figure for a slide. The object is that when such a message lands late on a Friday, somebody presses report rather than quietly deciding for themselves and carrying on.
Billing supplies every figure below while the page loads. An entry holds its place while you go on reading.
Ironscales attaches to your tenant over its API and inspects mail after delivery, which is the reason no MX record ever has to move and the reason it is emphatically not a gateway. It also means that where a message turns hostile a few hours past delivery, it gets lifted straight back out of the mailboxes holding it.
| Deposited on | Whichever mailboxes you name in Microsoft 365 or Google Workspace |
|---|---|
| Seals | Phishing, impersonation and payment redirection, including hours after arrival |
| Held at | Message metadata and flagged content within the Ironscales tenant |
| Sealed by | Ironscales, attached by API and emphatically not a gateway |
| Witnessed by | Fortify 24x7 engineers shaping policy and reading what people report |
Simulated messages on a rota, a short lesson pinned to whichever ones catch somebody, and a reporting button that puts a suspect message in front of another human instead of leaving it to a private guess made at speed.
| Deposited on | Whoever you enrol, filtered mailbox or not |
|---|---|
| Seals | Nothing on its own, which is the honest answer for a training line |
| Held at | Campaign outcomes and reporting history within the Ironscales tenant |
| Sealed by | Ironscales |
| Witnessed by | Fortify 24x7 engineers running campaigns and reading the outcomes |
Mail defence cuts how much reaches a person and shortens the life of anything bad that does. Judgement is not removed from the arithmetic.
Heads up: card statements show FORTIFY 24X7 - Cryptinest is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.