Protect the inbox. Protect the business.
A managed security layer around Microsoft 365 or Google Workspace that catches phishing, impersonation and suspicious messages, and removes them from every mailbox when something gets through.
Why this matters
Email is still the most common way attacks reach people. The dangerous messages are rarely obvious spam. They are invoices from a lookalike supplier, a shared file from a colleague whose account was taken over, or a short request from "the director" to make a payment.
The filters included with Microsoft 365 and Google Workspace stop a lot. Email Protection adds detection that looks at behaviour and context inside the mailbox, plus a team that acts on what users report.
What we do
- Phishing and impersonation detection: messages analysed for lookalike domains, display-name tricks, unusual senders and malicious links or attachments.
- Warning banners: clear notes on suspicious messages, so people know to check before they click.
- One-click reporting: users report a message from Outlook or Gmail and it is reviewed.
- Remediation across mailboxes: when one message is confirmed malicious, every copy is removed from every mailbox.
- Monthly review: what was caught, what was reported and which users are targeted most.
How it works
- Connect. Connected to Microsoft 365 or Google Workspace through the provider API. No change to your MX records.
- Tune. First two weeks in learning mode while we tune detection for your business.
- Enforce. Automatic actions turned on for high-confidence threats.
- Operate. Reported messages reviewed and remediated.
- Report. Monthly summary and recommendations.
What you receive
- A phishing detection and remediation log
- Monthly report of threats caught and users targeted
- A user guide for reporting suspicious email
Compliance
This service supports ISO/IEC 27001 Annex A 5.14 and 8.7. SOC 2 CC6.8 and CC7.2. See the full ISO 27001 and SOC 2 mapping.
Common questions
Do we need to change our email provider?
No. It connects to your existing Microsoft 365 or Google Workspace tenant.
Will legitimate email be blocked?
Detection starts in learning mode and is tuned before automatic actions are enabled. Released messages also teach the system.
Does it help with spoofing of our own domain?
Partly. Stopping criminals sending as your domain to other companies needs DMARC, which is our Domain Protection service.
Related
Protect the inbox. Protect the business.
Email contact@kullatech.com with a few lines about your business. We reply with a clear scope, not a sales call.
Email contact@kullatech.com