In short: IRONSCALES Email Protect is API-based email security that detects phishing, business email compromise and impersonation in Microsoft 365 and Google Workspace mailboxes and removes them automatically. Email Protect Pro adds encryption, DLP, account takeover protection and incident management; Complete Protect adds account takeover protection and security awareness training. All are licensed per user.
What IRONSCALES Email Protect is
Email Protect is the core IRONSCALES product: inbound email security that runs inside Microsoft 365 or Google Workspace through an API connection. It looks at each message in the context of the mailbox, learning who normally writes to whom and how, so it can spot impersonation, invoice fraud and other BEC attempts that carry no malicious link or attachment.
Its main parts are:
- AI detection of phishing, BEC, VIP impersonation and credential harvesting, including QR code attacks
- Autonomous remediation that removes a malicious message from every affected mailbox, not just the one where it was spotted
- Dynamic banners that warn users about suspicious messages in plain language
- Report-phishing button in Outlook so staff can flag messages, with reports feeding the detection engine
- Crowdsourced threat intelligence shared across the IRONSCALES customer base
- Spam and graymail handling, URL scanning and malicious attachment scanning
- Agentic AI investigation that classifies, clusters and remediates threats from detections and user reports
Editions and options compared
| Capability | Email Protect | Email Protect Pro | Complete Protect |
|---|---|---|---|
| AI phishing, BEC and impersonation detection | Yes | Yes | Yes |
| Autonomous remediation and report-phishing button | Yes | Yes | Yes |
| Spam and graymail filtering | Yes | Yes | Yes |
| Account takeover protection | Add-on | Yes | Yes |
| Email encryption and DLP | Add-on | Yes | Add-on |
| Email incident management service | Add-on | Yes | Add-on |
| Security awareness training and phishing simulation | Add-on | Add-on | Yes |
Add-ons we can supply
| Add-on | What it adds |
|---|---|
| Account Takeover Protection | Behavioural baselines per user, alerts on abnormal sign-ins, impossible travel and new forwarding or deletion rules, with actions such as forcing sign-out or disabling the account (Microsoft 365) |
| Incident Management | IRONSCALES analysts investigate reported and flagged messages and remediate on your behalf |
| Email Encryption | Outbound encryption, with an optional DLP version |
| Security Awareness Training | Training and phishing simulation |
IRONSCALES updates its packaging from time to time, so we confirm exactly what is included when we quote.
How it is licensed
All three editions are licensed per user: each mailbox user you protect. Shared mailboxes and service accounts are worth discussing with us before you count. Add-ons are licensed per user on the same basis. We bill monthly on your Forever Systems account and adjust the count as staff join and leave. Ask us for a quote for your user numbers and the edition you are considering.
Requirements and deployment
Email Protect supports Microsoft 365 (Exchange Online) and Google Workspace. Setup is a global admin consent that grants IRONSCALES API access, followed by a learning period while it builds a picture of normal mail. There is no MX change and no change to mail flow. The Outlook add-in is pushed centrally to users. Account takeover protection monitors Microsoft 365 sign-in and mailbox activity and does not need additional Microsoft security licences.
Who it suits and how we help
Email Protect suits organisations that rely on Microsoft 365 or Google Workspace filtering and still see phishing and invoice fraud reaching users, and those with a gateway that want post-delivery remediation. Complete Protect suits smaller IT teams that want email security and awareness training from one product. Email Protect Pro suits organisations that want investigations handled for them.
We set up the tenant connection, tune banners and remediation thresholds, deploy the report button and train your IT team on the console. Compare alternatives in email security.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between Email Protect and Complete Protect?
Complete Protect includes everything in Email Protect and adds account takeover protection, security awareness training and phishing simulation in one per-user licence.
What does Email Protect Pro add?
Email Protect Pro adds email encryption and DLP, account takeover protection and the IRONSCALES email incident management service, where analysts investigate and remediate threats for you.
Does IRONSCALES Email Protect work with Google Workspace?
Yes. Email Protect connects to both Microsoft 365 and Google Workspace by API.
Can IRONSCALES remove phishing after it has been delivered?
Yes. When a message is confirmed as malicious, IRONSCALES removes it from every mailbox that received it, including messages users reported.