Software · Cybersecurity
Email security
Protection for the inbox: phishing and spoofing caught early, and a simple way for staff to report mail.
Most attacks still arrive by email, often as a convincing message from a familiar name. We build email security tools that enforce SPF, DKIM and DMARC on your domains, inspect incoming mail for impersonation, risky links and attachments, and give staff a report button that sends a message straight to triage. Analysts see the verdict and its reasons together.
What we build
- DMARC roll-out tooling that parses aggregate reports and moves domains to p=reject safely
- Inbound checks for lookalike domains, display-name impersonation and reply-to tricks
- Link rewriting with time-of-click checks against reputation feeds
- Attachment sandbox hooks and file-type rules for macros, scripts and archives
- Report-phishing buttons for Outlook and Gmail that open a triage case
- Search and removal of a confirmed phishing message from every mailbox it reached
DemoInteractive · sample data
Try it live.
A working sample with made-up data. It runs in your browser; nothing is sent anywhere.
From: "Accounts Team" <accounts@northwlnd-traders.com> Reply-To: payments.update@mailbox-secure.net To: finance@kestrel-logistics.in Subject: Updated bank details for invoice 4471 Authentication-Results: spf=pass dkim=pass
- Sender domain
- Looks like
- Reply-To mismatch
- Domain age
- Request type
- Verdict
What it does well
Domain protection
SPF, DKIM, DMARC and MTA-STS are configured and monitored for every domain you own.
Impersonation checks
Mail that imitates your executives or suppliers is flagged before anyone replies.
Clear verdicts
Each flagged message shows why: failed DKIM, new sender, lookalike domain or risky link.
One-click reporting
Staff report suspicious mail in one click and hear back once it has been reviewed.
Fast clean-up
A confirmed phish is pulled from every inbox it reached, with a record of each removal.
Works with your mail
Built on Microsoft Graph and the Gmail API, alongside the filtering you already have.
Questions
Microsoft 365 and Google already filter mail. Why add more?
Their built-in filters stop most bulk spam and known malware. Targeted messages, such as a fake supplier asking to change bank details, often pass because nothing in them is technically malicious. We add checks tuned to your senders, suppliers and executives, plus the reporting and clean-up tools around them.
What is DMARC and why does it matter?
DMARC tells receiving mail servers what to do with messages that claim to come from your domain but fail SPF and DKIM checks. At p=reject, criminals cannot send mail from your exact domain. We move domains there gradually, using the reports to find every legitimate sender first.
Can you run phishing simulations for our staff?
Yes, as an authorised training exercise agreed in writing with your management and IT. Simulated messages go only to your own staff, links lead to a short training page, and results are reported by department rather than used to single out individuals.