A Fortify 24x7 brand. Security and continuity built around clinical work.Client sign inReach an engineer
Care Secure Systems
C
Wing C / Email defense

Nearly everything that goes wrong starts with a message somebody believed.

A practice inbox handles referrals, imaging results, insurer correspondence, vendor invoices, and the note from a colleague asking for a quick favor. All of it arrives in the same rectangle, and all of it looks roughly the same. These two lines place a protective layer inside the mailbox and put short, pointed drills in front of the people reading it all day.

IronscalesMailbox-level APIStaff training
2 lines / inside the mailbox / not a gateway
Lines in this wing2
ProductIronscales
Counted asMailbox or user
ConnectionAPI inside your tenant

Inside the mailbox, not in front of it

Sales material blurs this constantly, so here it is without the blur. Ironscales joins Microsoft 365 or Google Workspace over an API and reads mail after it arrives. No gateway is parked ahead of your mail flow, no MX record gets touched, and your routing stays exactly where it was.

The practical upshot is that mail which looked harmless on arrival and later proves otherwise can be retrieved from each mailbox that took it. A gateway which has already waved a message through has finished its work. This has not.

Training that names names, gently

The training line runs simulated phishing and assigns short lessons based on what people do with them. The useful output is not a scoreboard. It is knowing that the two people who handle every incoming invoice are also the two who click fastest, which is a scheduling and procedure problem rather than a character flaw.

Impersonation and takeover patterns are judged against your own tenant history, which is where the expensive cases hide. Mail sent from a partner mailbox that has genuinely been taken over carries real headers, real history, and a real relationship behind it.

Mail from a partner mailbox that has truly been taken over clears every technical check, because every technical fact about it is accurate. Training exists for precisely that case.
Lines in this wing

Line detail and rates

Each figure here is read live out of billing. Whatever you pick sits waiting on the side panel while you keep reading down the page.

Fortify-FES+SATLine detail

Mailbox Protection with Staff Training

Ironscales, connected by API, with training included

Protection that lives inside your Microsoft 365 or Google Workspace tenant and inspects delivered mail, paired with the awareness training that belongs beside it. Priced per mailbox, which is the unit tenants are actually licensed by.

  • Connects by API inside the tenant. No mail routing change and no MX record edit.
  • Takeover and impersonation patterns weighed against your own mail history.
  • Mail already delivered can be retrieved from each mailbox that took it.
  • Awareness training and phishing simulation bundled into the same line.
ProductIronscales
ConnectionAPI integration with Microsoft 365 or Google Workspace
Inspection pointMailbox level, after delivery
RecallDelivered mail can be retrieved right across the tenant
TrainingIncluded with this line
Counted asOne mailbox, charged monthly
Loadingper mailbox
charged monthly, in advance
QTY
Fortify-SATLine detail

Phishing Drills and Staff Training

Simulation and short lessons, priced per person

The training half on its own, for practices that already have mailbox protection or that want to extend drills to staff without their own mailbox. Simulations run on a schedule and lessons are assigned based on what people actually do.

  • Simulated phishing on a repeating schedule rather than one annual exercise.
  • Brief lessons handed out automatically to whoever earned one.
  • Results recorded name by name, which is what a training record has to show.
  • A reporting button in the mail client so staff can flag a suspect message.
ProductIronscales
DeliverySimulation campaigns with assigned follow up lessons
ReportingCompletion and result records per person
CadenceRepeating, not a single annual event
Use withMailbox protection, or on its own
Counted asOne user, charged monthly
Loadingper user
charged monthly, in advance
QTY
Included scope

What you get on these lines

  • Tenant connection and tuning against your own mail patterns.
  • Recall of delivered messages across every mailbox that received them.
  • Training records per person, exportable when somebody asks to see them.
  • Simulation campaigns that repeat instead of happening once a year.
Honest scope

Where this wing stops

Email is the category with the loudest claims in the industry. These are the boundaries we will not paint over.

  • Nothing here is a mail gateway, and we decline to describe it as one. It joins by API and reads mail after delivery. Any proposal promising to stop everything before it arrives is describing a different sort of product with a different set of tradeoffs.
  • Training lowers the click rate. It does not reach zero. Anyone who tells you their program eliminates human error has not measured one. The realistic goal is fewer clicks, faster reporting, and a staff that raises a hand early.
  • A personal webmail account is outside all of this. If a staff member forwards a chart to a personal address, that mailbox is not in your tenant and nothing here can inspect or recall it.
  • A legitimate but wrong disclosure looks like ordinary mail. Sending records to the correct address for the wrong patient is a real and common incident. No filter catches it, because technically nothing went wrong.
  • Compromised partner mailboxes are the hardest case in this category. Real sender, real history, real relationship. Detection helps and training helps more, but this is where losses continue to happen across the whole industry.
NOTE 01

Heads up: card statements show FORTIFY 24X7 - Care Secure Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.