Stop phishing &amp; BEC

Inspects Microsoft Teams and Slack for malicious threats while providing unified threat detection alongside email security, automatically remediating high-risk messages and surfacing every threat in a centralized log.

Abnormal Security

Behavioral AI email threat detectionAPI-based cloud email protection+10

Behavioral AI that protects email, identity, and AI, and stops insider threats.

AI Phishing Coach

Uses real attacks Abnormal has stopped to create personalized phishing simulations and training calibrated to individual employee risk levels.

Inbound Email Security

Account takeover protection+6

Detects advanced email attacks like BEC and phishing that lack payloads or signatures by analyzing behavioral baselines for every employee and vendor.

Messaging Security

Misdirected Email Prevention

Scans Microsoft Teams and Slack for malicious URLs and weaponized attachments, automatically remediating high-risk messages that native controls miss.

Audit loggingAutomated blocking+5

Uses behavioral AI to identify outbound emails destined for incorrect recipients, halts delivery, and requests sender confirmation before the message is sent.

Abusix

Commercial DNSBL for email threat blocking+9

Abusix is the essential solution in today's network security landscape, enabling fast and reliable mitigation of network abuse and cyber threats.

Mail Intelligence

daily querieslive chat supportquery analytics+1

A specialized email security solution designed to strengthen abuse detection capabilities.

Adaptive Security

AI-driven security awareness training+9

Unified security awareness training, email security, and AI governance built for the AI era.

AI threat detectionAttachment scanning+4

Cloud-based email security solution that uses behavioral signals, intent analysis, and LLM reasoning to detect and stop AI-powered phishing and business email compromise attacks.

AI-generated attacksAutomated remediation+5

AI-powered phishing simulation software that generates realistic deepfake video and audio simulations to test employee vulnerability across multiple communication channels.

Phish Triage

AI ClassificationAllow-listingAudit Trails+4

AI-powered email security solution that automates the classification and remediation of employee-reported phishing emails across all inboxes in seconds.

adaptive-trainingai-content-generation+5

Interactive training modules covering AI threats, phishing, voice cloning, and compliance from a library of over 1,000 resources.

Aegis AI

Autonomous AI agent threat detection+5

Our AI-native culture drives continuous reinvention and bold innovation. We embrace change, push to stay ahead of adversaries, and collaborate without ego, all while fiercely securing our customers' data as the foundation of their trust.

Inbound Email Security

BEC preventionExplainable AI+6

Prevent inbound email attacks, catch sophisticated zero-day attacks, and cut down on incorrectly blocked emails with adaptive inbound email threat detection powered by agentic AI.

Phishing MDR

Integrates with email gateways and platforms like Office 365 and Gmail to enhance identification of suspicious activities against phishing threats.

AI MDRAlert triage+3

Account Protector

Keep fraudsters out and trust intact with account abuse protection that defends against account opening abuse, account takeover, and sophisticated bot attacks.

Bot Manager

Stop the most dangerous, evasive bots before they erode customer trust by detecting and managing bot traffic at the edge.

AppRiver

Phishing and ransomware attack blocking+8

AppRiver is an email security vendor now operating under OpenText Cybersecurity after its acquisition by Zix and then OpenText. In the email-security scope, it is known for cloud-delivered filtering, phishing and malware blocking, and encrypted message delivery for organizations that want to protect Microsoft 365 and other email environments without deploying on-premises appliances. Its portfolio also includes adjacent compliance functions such as archiving and continuity, but the core buyer is typically a small-to-mid-sized business or managed service provider looking for managed email protection and encryption.

Multi-Factor Authentication

adaptive authenticationbiometricFIDO2+8

An enterprise-grade authentication solution that protects critical systems through adaptive, multi-layered security with continuous context-aware access control.

Area 1 Security (Cloudflare)

Pre-delivery phishing detection+10

Cloudflare started as a simple application to find the source of email spam. From there it grew into a service that protects websites from all manner of attacks, while simultaneously optimizing performance.

Arkose Labs

Unified fraud prevention platform+11

Arkose Labs provides fraud detection and prevention focused on account fraud, bot abuse, credential stuffing, fake account creation, and automated abuse across web and mobile touchpoints. Its platform combines real-time risk scoring with challenge-response enforcement to distinguish legitimate users from suspicious sessions and to raise the cost of abuse. The product is best suited for consumer-facing digital businesses such as ecommerce, financial services, and online platforms that need to stop automated and human-operated fraud without blocking valid traffic. Arkose also advertises AI-agent policy enforcement, but its core value in this category is adaptive fraud deterrence and step-up authentication.

Multi-Factor Authentication

Adaptive MFAFIDO2-certified+5

A flexible, user-friendly MFA solution that balances robust security with seamless user experience through intelligent risk assessment and adaptive authentication.

AuthLite

Active Directory two-factor authentication+11

AuthLite is a specialized multi-factor authentication solution designed specifically for Microsoft Active Directory environments to secure administrative and user pivots. It replaces traditional static password vulnerabilities by dynamically assigning privileged group memberships only after successful MFA validation. This architecture natively mitigates Pass-the-Hash (PtH) and credential harvesting attacks within Windows ecosystems without requiring complex federation.

Avanan

AI-driven phishing and BEC detection+8

Avanan is an email security product now sold under Check Point’s Harmony Email Security line, focused on protecting Microsoft 365 and adjacent collaboration channels from phishing, business email compromise, malware, ransomware, and data leakage. It deploys as a cloud app with no MX-record change and is positioned for organizations that want inline and post-delivery controls without replacing their existing mail stack. Its main fit is for Microsoft 365 customers that need layered protection beyond native filtering, including account-compromise and data-loss controls.

Barracuda Email Protection

Cloud-based email gateway defense+10

Barracuda is a leading cybersecurity company providing complete protection against complex threats

Email Protection

account takeover prevention+8

A complete email security solution that delivers AI-enhanced defenses, automated response and easy deployment.

Beyond Identity

Phishing-resistant passwordless MFA+11

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics. Its MFA offering is aimed at organizations trying to replace passwords, push approvals, and OTPs with stronger authentication for workforce access. The platform uses an authenticator on endpoints and a cloud policy engine to verify both user identity and device trust at login. It is best suited for security teams that want MFA with continuous device posture checks and support for managed and unmanaged endpoints, while avoiding legacy second factors that can be phished or replayed.

Phishing-Resistant MFA

device trustEDR integration+3

Device-bound passkeys that cannot be stolen, shared, or replayed, enabling single-step biometric login without passwords or codes.

RealityCheck

AI fraud preventionBiometric verification+4

Makes AI impersonation fraud impossible by verifying user identity and device trustworthiness before any call or chat.

Phishing Response

Email triageIOC extraction+3

A managed security service providing rapid triage, indicator of compromise extraction, and recommended mitigation for suspicious emails delivered by expert analysts.

GravityZone Extended Email Security

BEC detectionDLPEmail authentication+5

Cloud-native and API-enabled email protection solution combining secure email gateway with integrated mailbox-level defense.

Authenticator

Mobile appOffline operationOpen source+2

A free, open-source mobile app that generates time-based one-time passwords (TOTP) for multi-factor authentication, creating rotating 6-digit codes every 30 seconds to add an extra security layer beyond passwords.

Passwordless.dev

Admin consoleEvent loggingPasskey authentication+3

A passwordless authentication platform that enables organizations to provide secure, phishing-resistant authentication using FIDO2 WebAuthn standards across customer, user, and workforce applications.

Brain

AI-driven adaptive training+7

AI is everywhere. Most teams aren't ready. Brain fixes that. We're the platform companies use to drive AI adoption : measure it, prove it, and make it stick. Through micro-exercises, real usage data, and an AI mastery score per employee. 500,000+ employees trained. Deployed in days. 🤖 AI adoption : Prompting, AI Act compliance, risk detection. Measurable. Auditable. 🔐 Cybersecurity : Phishing, social engineering, data protection. Built as reflexes, not lectures.

Brain Arcade

3D customizerAdmin console+5

A physical security awareness arcade cabinet featuring integrated cyber training games that organizations can customize online and deploy at events or in office spaces.

Cyber Cup

Anonymous playArcade kiosk mode+4

A fully customizable cyber competition with custom game flow, boss fights and a public leaderboard that transforms security awareness into team-based arcade-quiz gameplay.

Cyber Journey

gamified learningsecurity training

A gamified security training platform that guides employees through progressive cybersecurity education as an interactive level-based progression system.

Deepfake Studio

AI deepfake photoboothEvent activation+3

A deepfake photobooth that demonstrates AI facial transformation risks in real-time by allowing users to witness synthetic media vulnerabilities through firsthand experience.

BrainStorm Inc.

Realistic phishing campaign delivery+8

BrainStorm Inc. provides a security awareness platform designed to reduce human-centric risk through personalized education and remedial training focused on behavior change. It utilizes 'Threat Defense Packs' that combine proactive learning with just-in-time training triggered by risky user actions. The solution provides measurable insights into security culture, helping organizations fulfill compliance requirements and reduce successful phishing and social engineering attacks.

AI Security

adaptive learningAI security awarenessemail campaigns+2

Content pack for training employees on secure AI adoption and responsible AI usage.

Security Awareness

communicationsevent management+3

Content pack for training employees on security best practices and threat awareness.

Simulated Phishing

behavior change coaching+3

Content pack for conducting simulated phishing attacks to measure and improve employee security awareness.

Threat Defense

adaptive workflowsadmin dashboardscompliance reporting+9

Content pack for training employees to identify and respond to security threats.

Super Phisher

A revolutionary new way to play and run phishing simulations and security awareness training through gamified phishing exercises.

Bot Management

account takeover preventionbot detection+3

Protects an organization's web, mobile, and API applications from the full range of bot attacks to prevent data loss, theft, and fraud.

Alterya

Dashboard analyticsEntity risk scoringExplorer tool+2

AI-powered fraud prevention

KYT

Address listsBehavioral alertsCase tracking+2

Monitor transactions in real-time for compliance

Cisco Secure Email Threat Defense

Advanced phishing and BEC detection+8

Cisco delivers the critical infrastructure to help organizations thrive in the AI era. By fusing networking, security, observability, and collaboration, we power how people and technology work together.

Secure Email Threat Defense

AI threat detectionAPI-based deployment+2

Cloud-scale email security platform with AI-driven threat detection providing complete email security protection with unified gateway and API-based deployment modes

Clearswift Secure Email Gateway

Deep Content Inspection for threat detection+11

Clearswift Secure Email Gateway is an enterprise email security gateway that inspects inbound and outbound mail for spam, malware, phishing, and data leakage before messages reach users or leave the organization. It is positioned as a deployment-flexible SEG for organizations that need on-premises, virtual appliance, or cloud delivery, and it is used by mid-market and enterprise buyers, including regulated sectors such as financial services, public sector, and defense. Its email scope is centered on threat prevention, content control, and outbound data protection rather than broader security platform functions.

Cloudmark

Patented message and content fingerprinting technology analyzes email payloads to identify and block known spam and malware variants with high accuracy across SMTP traffic.

Cloudmark, now part of Proofpoint, delivers carrier-grade email security primarily for service providers and large-scale messaging environments, protecting over 1.6 billion mailboxes globally. Its Cloudmark Platform for Email automatically detects and mitigates spam, phishing, malware, and other email-borne threats using patented content fingerprinting, URL/CTA analysis, and machine learning. The solution functions as a high-performance mail transfer agent (MTA) integrated at the network edge, offering flexible policy controls and an integrated reputation system. While Cloudmark also supports mobile and rich communications, its core Email Security role targets telecom operators and hosted email providers requiring near-zero false positives and real-time threat blocking.

Cloud for Email

geo-diverse datacentersmalware protectionmultiple configuration options+3

Cloud-based email messaging security solution

Cloud for Mobile

attack groupinggrey route abuse preventionMMS filtering+4

Cloud-based mobile messaging security solution

Platform for Email

cluster managementDoS protection+7

Protect email messaging from evolving threats using automated and predictive products

Platform for Mobile

DoS protectionflow control+7

Protect mobile messaging from evolving threats with real-time and predictive security

Spam Reporting Service (SRS)

7726 short code supportAndroid SDK+5

Report and analyze spam threats across mobile and email messaging

Cofense

Post-delivery phishing threat detection+11

Smarter Phishing Defense. Stronger Human Security.

PDR (Phishing Detection & Rapid Response)

automated remediationcampaign clustering+3

Uses AI-driven detection combined with human-validated intelligence to identify and automatically remove phishing campaigns across an organization's email environment within seconds.

multi-channelphishing simulationreal-time reporting+1

Helps organizations strengthen employee defenses against phishing attacks through human-vetted threat simulations and awareness training based on real threats.

Phishing Analysis

automated investigationcampaign detectionphishing triage+1

Stop phishing attacks before credentials are compromised through automated investigation of phishing alerts across security tools in minutes with multi-source correlation.

Coro

AI-driven phishing and malware prevention+11

Most security stacks get unmanageably complex as your business grows. Coro consolidates endpoint, email, cloud, network, identity, data protection, and security awareness training into one unified platform.

phishing simulationssecurity awareness+2

Trains users to identify phishing through real-world simulations and social engineering threat identification.

Fraud Detection System

Real-time traffic analysis platform that detects malicious behaviors including bot activity, spoofed IPs, and automated attacks using IP reputation and behavior patterns

Curricula

Threat-intel backed training episodes+9

Curricula, now part of Huntress Managed Security Awareness Training, provides security awareness training focused on employee behavior change through story-based lessons, phishing simulations, and reporting. In this category it is aimed at SMB and mid-market buyers that need recurring training without building a large internal program. The platform covers phishing, social engineering, password hygiene, and compliance-oriented awareness content, with assignments and tracking for administrators. It is positioned as a managed SAT product rather than a broad human-risk platform, with adjacent capabilities such as phishing simulation and reporting supporting the training workflow.

Managed SAT

phishing simulationsecurity awarenesstraining

Security awareness training content and phishing simulations learners actually enjoy, managed for you to make administration easy.

CybeReady

Automated security awareness training+11

Sharpen every employee's instincts to spot deception and stop attacks, while easing the burden on CISOs

Platform

ML-powered autonomous security awareness training platform that delivers adaptive phishing simulations and security readiness training to employees

automated reporting+7

CyberSentriq

MX-based gateway email security with sandboxing

Complete email security, backup, retention, and recovery in one unified platform - helping you protect customers, simplify management, reduce risk, and grow predictable recurring revenue with confidence.

compliance reportingphishing simulation+2

Delivers automated phishing simulations and story-based training modules to help organizations reduce human security risk through continuous reinforcement.

Unified Email Security

BEC protectionemail security+3

AI-native email protection that protects Microsoft 365 customers from phishing, impersonation, business email compromise, and other threats through a single coordinated platform.

Cybonet

Multi-layered anti-virus and anti-spam filtering for mail servers using modular engines to block known malware and spam at the perimeter

Cybonet, formerly PineApp Ltd founded in 2002, delivers enterprise email security primarily through its Mail Secure product, which operates as a secure email gateway stopping malicious threats at the network perimeter. The solution targets SMB to enterprise markets, offering modular anti-virus, anti-spam, sandboxing, and content filtering in on-premises or cloud deployments. While Cybonet offers adjacent capabilities like network visibility and SIEM, Mail Secure focuses exclusively on email threat prevention, encryption, archiving, and branding. It is best suited for organizations needing layered email defense without replacing existing mail infrastructure.

Payment Fraud Intelligence

API alertsBIN trackingcard monitoring+2

Real-time intelligence that uncovers fraud campaigns before they hit through monitoring of compromised cards and dark web engagement.

bec-protectionemail-security+4

An AI-powered unified security platform that consolidates 15 modules into a single console with AI-Driven Phishing Detection and business email compromise defense.

Anti-Phishing

awareness trainingphishing simulationreporting

A security awareness training system that simulates escalating email phishing attacks to evaluate and improve employee ability to recognize and avoid cyber threats.

automated remediationmalware scanning+2

Smarter Email Protection. Built for the Speed of Business with advanced AI and behavioral analysis.

account takeover detectionbehavioral AIDLP+2

Context-aware email defense, beyond just the inbox

DataDome

Real-time bot detection and mitigation+11

DataDome provides real-time fraud detection and bot management for web applications, mobile apps, public APIs, and MCP servers. In the fraud-prevention market, it is positioned around stopping account takeover, fake account creation, credential stuffing, card testing, and other automated abuse before requests reach the backend. The product classifies each request as human, bot, or trusted partner using request-level signals, device and browser data, and behavioral models. It is best suited for e-commerce, marketplaces, fintech, and other businesses where automated abuse directly affects customer accounts, checkout flows, and dispute volume.

Deception Check

Multi-channel deception simulations+5

Catch threats your other tools miss. Adaptive honeypots that look and act like your real systems, so attackers reveal themselves the moment they touch one.

Messaging Trust Manager

Stop spoofing, secure messages, deliver verified logos in every inbox.

DMARCian

Complete DMARC visibility and email ecosystem monitoring

Founded in 2012 by a primary author of DMARC, dmarcian's purpose is to see widespread adoption of DMARC.

DMARC Management Platform

Alert managementAPI access+5

Centralized platform to process and visualize DMARC data to expose email authentication gaps across your domain portfolio.

Duo Security

Two-factor user verification+11

Duo Security makes strong protection simple with easy-to-use multi-factor authentication and smart, risk-based tools. By minimizing friction, it helps users stay secure without slowing them down.

EasyDMARC

DMARC deployment and management+11

We make DMARC deployment EASY and provide a solution that requires no expert knowledge from customers.

EasySender

anomaly detectiondeliverability optimization+5

An all-in-one email deliverability platform that provides centralized visibility into outgoing email activity to detect delivery risks and maintain good sender reputation.

TouchPoint

contact enrichmentCRM integration+4

A signal-based MSP pipeline tool that identifies companies with email security vulnerabilities and generates qualified leads for managed service providers.

Echoworx

Policy-driven email encryption layer+11

Echoworx provides an integrated infrastructure layer that replaces rigid encryption point products. We help enterprises move to the cloud, modernize communications, and protect sensitive data with secure communications built for how business works now, not how it worked years ago.

Email Encryption Platform

Encrypted documentsEnterprise SSO+8

A fully integrated, cloud-native infrastructure layer that secures outbound email and reply chains with policy-driven encryption across multiple delivery methods including TLS, S/MIME, PGP, and secure web portals.

Egress

Outbound email encryption+11

Enable secure and compliant email communication without adding friction. Make it easy for your teams, customers, and partners to work securely and prevent data leaks using encrypted email and simplified DLP policies.

Defend

attack preventionphishing detection

Stop advanced phishing attacks

Protect

Secure, certified end-to-end email encryption

email securityencryption

Context-based phishing simulations using live threat intelligence

Workspace

collaborationsecure sharing

Collaborate and share securely

ESET Mail Security

Spam filtering for inbound mail+10

ESET Mail Security provides multilayered protection for Microsoft Exchange servers, scanning mailboxes, public folders, and hybrid Microsoft 365 environments. It uses proprietary anti-spam engines with SPF/DKIM validation, backscatter protection, and SMTP safeguards, alongside anti-malware scanning for attachments including corrupted or password-protected archives. A 64-bit architecture supports clustering for high-performance mail processing. Optional modules include Advanced Threat Defense and LiveGuard for suspicious emails. Best suited for organizations prioritizing on-premises Exchange security with remote management via ESET PROTECT console and comprehensive rule-based filtering.

ESET Security Awareness Training

Interactive online awareness training courses+11

ESET Cybersecurity Awareness Training (ECAT) is an online platform launched in August 2025 by ESET, a global cybersecurity vendor with 30 years of experience. It delivers employee education on phishing recognition, social engineering, ransomware avoidance, password hygiene, MFA usage, safe browsing, data handling, mobile security, and incident reporting. The solution includes gamified quizzes, interactive role-playing scenarios, a 5-module course with 18 sub-modules completable in under 90 minutes, weekly security news updates, and unlimited phishing simulations via ESET Phishing Simulator. IT admins access a dashboard for training progress and simulation statistics. Supports NIS2, HIPAA, PCI, SOX, GDPR, CCPA compliance.

3D Secure

3D Securefraud preventionliability shifting+1

3D Secure payment authentication to reduce fraud and meet compliance requirements.

Card Insights and Verification

BIN lookupcardholder verificationdecline prediction+1

Verify card data and gain insights into payment card information to reduce fraud and chargebacks.

Distributed Cloud Bot Defense

AI protectionAPI securityBot detection+1

Stop malicious bots and AI agents with real-time detection that protects apps, APIs, and user experiences.

Fable Security

Realistic phishing attack simulations+11

Fable brings together the best of engineering, behavioral science, and AI to solve one of security's hardest problems.

Behavioral Interventions

behavior targetingcontent composer+3

Briefings, nudges, and chats that shape behavior in the moment and over time through cohort building, behavior targeting, and mass-customized content.

behavioral reportingdeepfake simulation+3

Campaigns designed to arm employees for real-world threats including phishing, vishing, deepfakes, MFA bombing, LLM injection and more.

AI customizationcampaign automation+3

Targeted content tied to real threats, policies, and risky behaviors with AI-customizable templates and rapid threat response capabilities.

Falkin

No verified data available+6

Falkin combines early threat intelligence, AI and 1st party user data to surface scam operations from even a single suspicious interaction. Our mission is simple: to make scams preventable and proactive digital safety a standard feature of everyday banking. We can help everyday consumers detect signs of danger in online purchases, messages, investment offers, phone calls, emails and more.

Bot Management

Account takeover protection+5

Control bots without breaking your business by detecting and mitigating automated traffic while maintaining legitimate user access and operational efficiency.

Feedzai

Real-time fraud and scam detection+11

Feedzai provides fraud detection and prevention for banks, fintechs, and payment providers using real-time decisioning across cards, RTP, ACH, transfers, digital banking, and account opening. The platform combines behavioral biometrics, device identity, malware detection, and network-level fraud intelligence to score sessions and transactions before authorization or account action completes. Feedzai is positioned as an end-to-end financial crime platform, but for this category the focus is on fraud and scam prevention rather than AML workflow. It fits institutions that need low-latency scoring, explainable alerts, and models that adapt to changing fraud patterns.

Account Monitoring

AI agent detectionATO detectionbehavioral biometrics+2

Monitors accounts for suspicious activity and digital trust.

AML Transaction Monitoring

anomaly detectioncase management+3

Detects suspicious transaction patterns for anti-money laundering compliance.

Feedzai IQ

Provides actionable network intelligence to detect fraud and financial crime patterns.

New Account Fraud

Protects against fraud during account creation and onboarding.

Feedzai Orchestration

Enables automated and seamless account opening with integrated security checks.

RiskOps

behavioral biometricsdevice intelligence+5

A unified platform that delivers a unified approach to fight fraud and financial crime across the entire customer lifecycle.

Scam Prevention

behavioral analyticscoercion detectiondevice intelligence+5

Helps banks stop fraud and scams with AI-driven decisions.

Secure Onboarding

advisory-led strategiescontinuous monitoring+3

Combines behavioral and device intelligence for secure account opening.

Transaction Fraud

anomaly detectionbehavioral analytics+5

Prevents fraudulent transactions across all channels.

Watchlist Screening

audit trailscontext-aware matching+4

Screens customers against regulatory watchlists for compliance.

FIDO Security Keys

Biometric fingerprintFIDO2 authentication+3

Simpler and stronger authentication through passwordless verification methods with multiple form factors including biometric, NFC, and iOS-compatible options.

OTP Authentication

E-signatureMobile OTP support+3

Comprehensive authentication solution offering the perfect substitution for authenticator mobile apps with various form factors including single button, e-signature, QR code, and mobile/watch variants.

Power Card & Display Card

Card-based authEmbedded chip+3

Card-based authentication solutions combining card and OTP functionality with one-stop banking solution capabilities including OTP display, chip embedded, and fingerprint biometric options.

Fraud Intelligence

account takeover prevention+5

Helps you detect and prevent financial fraud before it impacts your business by monitoring dark web marketplaces and underground communities for stolen credentials, compromised payment cards, and illicit cryptocurrency activities.

Forter

Real-time transaction fraud prevention+8

AI built for the humans behind every fraud, abuse, and payments decision, so your best customers feel less friction, and you leave no revenue behind.

FortiMail

Inbound and outbound email protection+11

Fortinet FortiMail is an email security gateway that filters inbound, outbound, and internal email traffic for spam, malware, phishing, and ransomware using machine learning, outbreak detection from FortiGuard Labs, and executable sandboxing. It supports data loss prevention, identity-based encryption, and message archiving for compliance with SOX, HIPAA, and PCI DSS. Deployable as hardware appliances (e.g., FortiMail-3000D with 4-16 TB storage, 2000 domains), virtual machines (e.g., FortiMail-VM08 with 8 TB, 2000 domains), public cloud on AWS, or SaaS. Best for enterprises and SMBs integrating with Microsoft 365, Exchange, or Google Workspace needing multi-layered SEG protection.

Frame Security

Personalized security training+11

We are a team of security experts who believe resilience starts with people. We helps organizations empower their employees to understand modern threats and act as the strongest line of defense.

Fraud.net

Real-time transaction monitoring+10

Fraud.net provides transaction fraud detection and prevention for digital enterprises, with a focus on e-commerce, travel, and financial services. Its platform scores transactions in real time, uses rules and machine-learning models to flag suspicious activity, and can block or hold payments for review before authorization completes. Fraud.net is positioned for organizations that need low-latency fraud controls across online payment flows and want to use shared fraud signals, device and behavioral data, and case review workflows. Adjacent capabilities such as case management and broader risk tooling exist, but the core value here is real-time fraud interception.

GetReal Security

GetReal Security is primarily a **deepfake and identity verification** vendor, not a classic phishing-simulation suite. Within security awareness, its nearest fit is training and testing employees against synthetic-media impersonation and AI-driven deception, including deepfake audio/video and collaboration-platform fraud. The company is best suited for enterprises, government, media, and high-risk organizations that need to validate authenticity in live communications and prepare staff for impersonation-based social engineering. Public materials emphasize real-time content verification, forensic inspection, and awareness preparation rather than broad email-phishing campaign management.

Deepfake detection+9

GhostEye

AI-generated personalized simulations+10

GhostEye is a human-risk security vendor focused on security awareness and phishing simulation through personalized, multi-channel social-engineering tests. It maps employee-facing exposure from public web and organizational data, then uses that context to generate phishing, voice, SMS, and deepfake simulations tied to current events and real attacker tactics. The platform is best suited to security teams that want continuous human-layer testing rather than classroom-style awareness training. Adjacent offerings are limited to contextual training tied to simulation outcomes.

Glasswall

Real-time attachment disarmament via CDR+8

Glasswall is a cybersecurity company that enables organisations to operate securely, safeguarding their data and networks with intelligent file protection. At its core, Glasswall's technology combines Zero Trust CDR with AI-powered threat detection, uniquely engineered to remove, predict, and counter unknown threats.

Graphus

AI-driven social engineering and zero-day attack detection

Graphus is a cloud email security product focused on Microsoft 365 and Google Workspace tenants. It detects phishing, spoofing, business email compromise, account takeover, malware, and ransomware attempts, then quarantines suspicious mail and warns users before they interact with it. The product is positioned for organizations that want API-based deployment without MX record changes, mail rerouting, or agents, and for MSPs or IT teams that need automated inbox protection with minimal operational overhead. It is offered as an anti-phishing and email-borne threat defense layer rather than a full secure email gateway replacement.

GreatHorn

ML/AI-driven phishing and BEC detection+8

GreatHorn is a cloud email security platform focused on detecting and remediating phishing, business email compromise, impersonation, credential theft, account takeover, malicious URLs, and payloads in Microsoft 365 and Google Workspace environments. It is positioned for enterprises that need post-delivery search-and-removal workflows, inbox-level remediation, and integration into broader security operations. GreatHorn is best suited for organizations that want to reduce manual phishing response across complex mail environments and connect email incidents to SOAR and SIEM tools.

Guardz

AI-driven phishing and malware detection+10

Guardz is a unified cybersecurity platform that includes email security for MSP-managed SMB environments, with a focus on API-based mailbox protection, phishing/BEC/ransomware detection, and automated quarantine. In the email security scope, it scans user and shared mailboxes, flags suspicious messages and attachments, and supports sender/domain blocking and allowlisting. Guardz is best suited for MSPs that want email controls managed from the same console as broader identity and endpoint protections, rather than a standalone email gateway.

Halon

Real-time spam, phishing, and malware detection using carrier-grade content filtering with industry-lowest false-positive rates for inbound email streams

Halon is a Swedish email infrastructure and security company founded in 2010, specializing in carrier-grade email threat detection and classification for service providers, inbox providers, and large-scale enterprise senders. Its core Email Security product, Halon Classify, is a specialized intelligence engine that performs real-time content filtering to identify spam, phishing, and malware with near-zero false positives. While Halon also offers the broader Halon Protect platform for rate limiting and link protection, Classify remains the focused component for inbound threat classification. The vendor is best suited for organizations managing custom mail infrastructure (MTAs) requiring precise, high-volume threat filtering without sacrificing performance.

Hoxhunt

Adaptive phishing simulations+11

Hoxhunt offers a security awareness training platform focused on behavior change through personalized phishing simulations, micro-training, and gamified employee coaching. The product is positioned for organizations that want to move beyond annual compliance modules to ongoing, role-aware training across email, Slack, and Microsoft Teams. It is strongest for enterprise and global teams that need multilingual content, adaptive difficulty, and audit-ready training records. Hoxhunt also has adjacent response capabilities, but the core SAT offering centers on employee training and phishing resilience.

HYPR

FIDO2 passkey-based passwordless authentication

HYPR is on a mission to improve the lives of security-minded leaders, their employees and customers by helping organizations create trust in the identity lifecycle.

Immersive

Simulation-based phishing smishing and vishing training

Immersive is a British cybersecurity company helping organizations prove cyber resilience in the AI era.

Imper.ai

Real-time fake interaction detectionMulti-channel phishing defenseIdentity-first prevention workflows+8

Detect and prevent impersonation attacks on your workforce.

Infosec (now a Cengage Company)

Phishing simulator and awareness training+7

Infosec, now part of Cengage Group, sells security awareness training through Infosec IQ for organizations that want to reduce phishing, social engineering, and unsafe user behavior. The platform combines role-based training, phishing simulations, and recurring microlearning, with content that can be delivered in multiple formats to employees and contractors. It is positioned for security teams and L&D groups that need measurable awareness programs rather than one-off training. Infosec also offers adjacent cybersecurity skills training, but those products are outside this profile.

INKY

Generative AI intent analysisComputer vision brand impersonation detection+4

INKY is a cloud email security platform focused on phishing, impersonation, business email compromise, and data loss prevention for Microsoft 365 and other email environments. Its differentiator in the email security category is behavioral analysis combined with user-facing coaching: it renders messages visually, applies computer vision and machine learning, and adds inline warnings to help recipients make safer decisions. It is positioned for organizations and MSPs that want layered inbound protection and optional outbound controls without relying only on pattern-based filtering.

IronCircle

Phishing simulation campaigns+10

IronCircle is a browser-based cybersecurity training platform that includes security awareness training, phishing simulation, hands-on labs, and scenario-based certification. In the security awareness and phishing simulation category, it is positioned more as a training platform than a pure phishing simulator, with emphasis on realistic practice and behavior change. It is best suited for organizations that want awareness content tied to practical security exercises and role-based skill validation rather than simple email-only simulations. The company also sells broader cyber training content, but its awareness capabilities are the relevant scope here.

IRONSCALES

API-based cloud email threat detection+9

IRONSCALES is an AI-driven email security platform designed to detect and remediate advanced phishing, Business Email Compromise (BEC), and account takeover (ATO) attacks. It utilizes a hybrid approach combining machine learning algorithms with crowdsourced human intelligence to provide a decentralized self-learning system. The platform integrates via API with Microsoft 365 and Google Workspace, replacing or augmenting traditional SEGs with an Integrated Cloud Email Security (ICES) architecture.

Keepnet Labs

AI-powered phishing simulation across email, SMS, voice, QR codes, MFA, and callback channels using 1600+ ready-to-test scenarios in 160+ languages to assess employee vulnerability to social engineering

We ensure continuous protection for all sizes of businesses against human-targeted threats!

KnowBe4

Security awareness training modulesSimulated phishing campaigns+9

KnowBe4 empowers modern workforces to make smarter security decisions every day

Kount

Real-time transaction fraud scoring+11

As a trusted global leader in data, analytics, and technology we deliver insights that power decisions to move people forward.

LexisNexis Risk Solutions

Identity fraud detection scoring+10

LexisNexis Risk Solutions provides fraud detection and prevention products focused on new-account fraud, identity misuse, synthetic identity, and application fraud. Its Fraud Intelligence and ThreatMetrix offerings combine identity events, device and behavioral data, and application signals to score risk in real time and flag suspicious transactions or registrations for review. It is best suited to banks, card issuers, lenders, telecom providers, utilities, and other organizations that need decisioning at onboarding and during account lifecycle management. Adjacent identity verification and compliance products exist, but the fraud portfolio is the relevant scope here.

LIBRAESVA

Adaptive Trust threat detectionSemantic intent analysis+7

Our privacy-first AI keeps your inbox and your business safe.

Living Security

Risk-based training targeting and deployment+11

Living Security was born from a vision to revolutionize human risk management. Founded by cybersecurity experts, we've moved beyond compliance to empower organizations with data-driven security cultures.

LuxSci

Automated HIPAA-compliant email encryption+9

LuxSci is a secure healthcare communications vendor whose email security offerings center on HIPAA-compliant message protection, policy-based encryption, and compliant delivery for organizations handling PHI. In the email-security scope, it is best known for secure high-volume transactional email, gateway-based encryption for Microsoft 365 and Google Workspace, and secure email hosting with auditability. It is aimed at healthcare providers, payers, digital health companies, and other regulated organizations that need encrypted email without sacrificing delivery at scale.

Lydsec Keypasco

Device-based multifactor authentication+11

Keypasco, developed by Lydsec, provides a multi-factor authentication solution that emphasizes device identity and location-based security without requiring traditional hardware tokens. The platform utilizes a patented 'Device Fingerprint' and 'Geofencing' technology to ensure that only authorized users on specific devices can access resources. It is designed for high-scalability environments where passwordless authentication and user convenience are primary requirements.

MailChannels

Real-time outbound spam filtering using machine-learning-driven detection and content classification for SMTP relay traffic to prevent spam outbreaks from compromised accounts.Automated compromised-account detection that identifies stolen mail accounts, web scripts, and application exploits used for mass mailing before email leaves the server.

Empowering safer connections in an open world.

MailGuard

Microsoft-native AI-powered email security for Microsoft 365

MailGuard, a GlobalGuard company, is a world leader in email security, providing both Secure Email Gateway (SEG) and Integrated Cloud Email Security (ICES) protection that detects and blocks sophisticated, fast-moving email threats hours ahead of the market.

MailInBlack

Advanced AI spam and phishing filtering+7

We are a cybersecurity company based in France, whose mission is to protect its customers from cyber attacks.

Mailprotector

Inbound spam and malware filtering+9

Mailprotector designs, builds, and supports products that help organizations secure and optimize email.

Malwation

Real-time Content Disarm and Reconstruction+6

Malwation is a research and development company founded in 2020, specializing in advanced malware analysis solutions. While its core platform focuses on holistic malware analysis rather than dedicated email security gateways, it offers capabilities relevant to email security by automatically downloading and analyzing files fetched from URLs within email attachments to identify malware or malicious content. Malwation is best suited for organizations seeking deep malware inspection for email-delivered threats, particularly those needing to validate file safety before execution. The company does not market itself as a primary email security vendor but provides adjacent malware analysis that supports email threat mitigation.

Material Security

Email SecurityFile SecurityAccount Security+1

Material Security secures the productivity suite by stopping attacks and reducing risk across Microsoft 365 and Google Workspace with unified cloud email and file security, data loss prevention and posture management.

automated remediationemail threat detectionphishing response+1

Runs on auto-pilot to remediate sophisticated email attacks that bypass traditional controls and automate user-reported phishing investigations.

Account Takeover & Digital Impersonation Protection

ATO preventionCredential stuffing detection+6

Real-time detection, protection, and disruption of digital impersonation attacks and account takeover fraud threats.

Mesh 365

Impersonation Detection+11

Mesh 365 by Mesh Security is an API-based email security platform that enhances Microsoft 365 with advanced threat detection and response for email-borne attacks. It protects against BEC, phishing, ransomware, supply chain fraud, impersonation, and spoofing using native API integration rather than mailflow or DNS changes. It supports MSP and enterprise use cases with cross-tenant visibility, centralized policy management, global block/allow rules, and one-click multi-tenant remediation. Features include sandboxing, URL protection, warning banners, and monitor-only deployment mode for safe evaluation. It reduces email security workload and improves response efficiency.

Mesh Gateway

MX-basedperimeter protectionthreat detection

Email security solution that protects organizations by stopping advanced email-based threats before they reach inboxes.

Mesh Unified

global rulesmailbox protection+4

2-in-1 solution protecting both the perimeter and the mailbox, combining email security capabilities in a single platform.

MetaCompliance

Automated tailored phishing simulations+8

MetaCompliance provide effective, personalised and measurable Security Awareness Training to companies and organisations.

Advanced Phishing Simulation

AI targetingcampaign automation+3

Automated, tailored phishing simulations that build confident responses, reduce human risk, and strengthen security culture.

Automated Security Awareness

analytics dashboardse-learning+4

Personalised, automated learning that adapts to every employee, drives behaviour change, and reduces human risk across your organisation.

Microsoft Defender for Office 365

Safe Links for real-time URL scanning+10

Microsoft Defender for Office 365 is Microsoft’s email security service for Microsoft 365, aimed at protecting Exchange Online mailboxes and related collaboration surfaces from phishing, malware, and business email compromise. Microsoft positions it as the primary email and collaboration security layer above the baseline protections in Microsoft 365, with Plan 1 for core advanced threat protection and Plan 2 for deeper hunting and response. It is best suited for organizations already standardized on Microsoft 365 that want native protection, policy control, and security operations workflows inside the Microsoft ecosystem.

Mimecast

Inbound and outbound email threat scanningURL and attachment threat detection+9

Mimecast protects the work of every person in the organization, across every channel, from every actor, human and AI.

Advanced Email Security

BEC defenseComputer vision detectionContextual email banners+6

Stop dangerous email-borne attacks by effortlessly managing complexity while securing M365, Google Workspace, and on-premise email through AI-powered threat detection and blocking.

Awareness Training

Behavior-based phishing simulations+11

Mimecast Awareness Training is Mimecast’s security awareness training product for reducing employee-caused security incidents. It delivers web- and email-based awareness content, video modules, and behavior-driven interventions tied to the company’s Human Risk Command Center. The product is aimed at organizations that want to train users to recognize phishing, social engineering, credential harvesting, and unsafe data handling. It fits buyers looking for awareness content plus risk measurement and targeted coaching rather than a standalone learning management system. Mimecast also markets broader human risk tooling, but this profile is limited to awareness training.

Collaboration Threat Protection

14-day threat scan lookback+6

AI-powered security solution that keeps malware, phishing, and dangerous content out of Microsoft Teams, SharePoint, and OneDrive.

DMARC Analyzer

360-degree domain monitoring+7

Enables organizations to gain control of email domains, enhance deliverability, and prevent spoofing attacks that exploit brand impersonation.

Engage

Adaptive interventionBehavior analytics+3

Connects real employee behaviors with targeted interventions to help organizations transform human risk into security resilience through adaptive, personalized training and real-time risk visibility.

N-able Mail Assure

Inbound and outbound email security+7

N-able Mail Assure is a cloud-based email security gateway for MSPs and Microsoft 365 environments. In scope for email security, it filters inbound and outbound mail, blocks spam and email-borne threats, supports policy-based controls, and provides quarantine, archiving, and continuity functions through a web console. N-able positions it for service providers and IT teams that need centralized protection for multiple domains and tenants, plus message-level visibility and administrative reporting. Adjacent capabilities include a private portal for handling sensitive messages and Microsoft 365 add-ons, but the core product is email gateway protection.

Mail Assure

email-archivingemail-continuity+5

Cloud-based email security with phishing detection, spam filtering, malware blocking, and encrypted archiving.

Authenticator App

biometric authMFAoffline+2

Time-based one-time password generator for two-step verification across NCP VPN services and online platforms with support for SHA-1, SHA-256, and SHA-512 algorithms.

RADIUS Service

access controlAuthenticationcloud-based+3

Cloud-based device and user identity authentication service with device fingerprinting, per-device isolation, and strong certificate-based security

NINJIO Cybersecurity Awareness Training

Narrative cybersecurity awareness episodes+11

NINJIO provides a human risk management platform that utilizes personalized security coaching and story-based awareness training to reduce the likelihood of social engineering attacks. The platform generates an Emotional Susceptibility Profile for users to identify specific psychological triggers and tailor content accordingly. It replaces generic, compliance-only training with behavioral science-driven modules to change organizational security culture.

ALERT

email analysisemail reporting+3

Email add-in tool that enables users to report suspected phishing emails with a single click and streams information to incident response teams for quick analysis.

AWARE

executive summariesmicrolearning+3

Cybersecurity awareness training platform that delivers engaging, short-form video content to help employees identify and avoid cyber threats.

PHISH3D

personalized coachingphishing simulation+4

Email and voice phishing simulation platform that builds unique emotional susceptibility profiles based on user behavior and social engineering vulnerability.

SENSE

adaptive learningbehavior-based contentemotional vulnerability assessment+2

Personalized security coaching program that tailors instruction to each individual's emotional vulnerabilities identified through phishing simulations.

SmartFactor Authentication

Flexible authentication factors including the OneLogin Protect OTP app, email, SMS, voice and WebAuthn biometrics, plus third-party options such as Google Authenticator, Yubico, Duo Security and RSA SecurID.

Uses the Vigilance AI risk score to dynamically adjust authentication requirements in real time based on per-login risk, applying machine learning to location, device and user behaviour signals.

OneSpan Inc

Mobile two-factor authentication with biometrics and OTP

OneSpan specializes in digital identity verification and hardware/software-based multi-factor authentication for high-security environments like banking and enterprise access. The platform supports a wide range of authentication methods including FIDO2, OTP, and mobile push, alongside mobile application shielding to protect against reverse engineering and overlay attacks. It complements IAM stacks by providing the enforcement layer for secure login and transaction signing.

DigipassONE

A unified authentication modernization platform that integrates passkeys, MFA, hardware authenticators, and transaction signing across the user journey.

analyticsapp shielding+3

DigipassONE Authenticate

biometricFIDO2hardware tokens+5

Provides passwordless, MFA, and transaction security capabilities for deploying phishing-resistant authentication at scale.

Moderation API

Confidence scoringContent safetyHarmful content detection+3

Content safety classification for text and images to identify potential abuse and limit disruption

MetaDefender Cloud Email Security

AI detectionCDREmail security+2

Specialized security solution for Microsoft 365 that adds multilayered file inspection using multiscanning, Deep CDR technology, and AI-based attack detection across inbound, internal, and outbound email

Optimal Authentication Service

MFAPasswordless authenticationPush notifications+4

Hosted, RESTful web service that performs various types and levels of authentications including single authentication and multi-factor authentication.

Paubox

Automatic TLS encryption for all outbound emailsGenerative AI inbound phishing detection

Become the market leader for HIPAA compliant email security

Email API

10+ language supportBAA included+3

Healthcare-first email API solution built specifically for HIPAA compliance with TLS 1.2+ encryption enforced by default

Email Marketing

BAA includeddrag-and-drop builder+2

HIPAA-compliant email marketing platform built specifically for healthcare organizations with drag-and-drop builder and compliance-first architecture

Email Suite

automatic encryptionencryption+3

HIPAA-compliant email encryption solution that automatically encrypts every outbound email without requiring user judgment

Inbound Email Security

AI threat detectionbehavior analysis+3

AI-powered email security that learns and evolves to protect against sophisticated email threats while maintaining HIPAA compliance

Perception Point

AI-powered real-time dynamic scanning+8

FortiMail Workspace Security delivers AI-powered protection for email, browsers, collaboration, and cloud apps across the modern workspace

PhishFirewall

AI-generated phishing simulations customizable by tone, industry, and language to mimic real-world threats

PhishFirewall Analytics is a commercial phishing simulation tool designed to help security teams assess and reduce human cyber risk through realistic, AI-generated attack scenarios. It specializes in customizable simulations by tone, industry, and language, paired with real-time user behavior tracking during campaigns. The platform enables risk-based targeting, automated follow-up training, and detailed analytics tied to human risk reduction. Best suited for mid-to-large organizations seeking to strengthen security awareness without complex deployment, it operates within the broader Human Risk category. While adjacent products may exist, PhishFirewall Analytics is focused exclusively on phishing simulation capabilities.

Lora

AI-powered content generation+4

An autonomous AI platform that delivers hyper-personalized security awareness training and phishing simulations without requiring manual administration.

PhishEQ

AI analysisAPI-based deployment+3

An API-based email security solution that detects and automatically removes phishing threats from Microsoft 365 and Google Workspace inboxes, including threats that bypass traditional filters.

BEC simulationDeepfake vishingJust-in-time training+2

Uses generative AI and machine learning to create hyper-personalized phishing simulations that test and train employees to recognize sophisticated, real-world attacks including MFA bypass techniques and deepfake-based threats.

Phriendly Phishing

Customizable phishing simulations with email attachments to test employee handling of malicious file downloadsCredential capture scenarios within phishing emails to assess susceptibility to fake login page attacks

Phriendly Phishing's mission is to transform how organisations manage human cyber risk and build resilient cyber cultures grounded in empathy, education, and measurable impact.

Cyber Security Awareness Training

behavior transformationlocalized content+1

Localized, engaging educational content designed to build lasting security habits and foster behavioral change across organizations.

Phishing Simulation

credential capture testing+2

Enables organizations to plan and deploy phishing simulations that mimic real-world attacks with customizable scenarios including email attachments and credential capture attempts.

Phish Reporter

employee reportingoutlook integration+1

An Outlook Add-in providing a simple, accessible way for employees to report suspected phishing emails, fostering a culture of awareness and prompt response.

Platform

behavior trackingcompliance reporting+2

A comprehensive platform for Human Risk Management and Security Behaviour & Culture Programs that converts human risk into organizational strength.

Pindrop

Multifactor fraud detection for contact centers+10

Pindrop is a cybersecurity company delivering the Real Human + Right HumanTM platform with continuous identity verification and deepfake detection across voice, video, and digital communications in real time.

Fraud Assist

AI investigationcase automation+2

Resolve more fraud investigation cases in less time using the first AI agent for phone fraud investigations with instant call summaries and case note generation.

Passport

behavior analysisdeepfake prevention+3

Enable fast, secure caller authentication using voice, device, and behavioral signals while reducing operational costs and average handle time.

Protect

device analysisfraud detection+3

Reduce fraud and better protect customer accounts with near real-time fraud risk assessments throughout the call lifecycle.

Pulse for Contact Centers

deepfake detectionliveness detection+2

Enable contact center agents to identify synthetic voices and deepfake audio threats in just two seconds.

Pulse for Meetings

deepfake detectionliveness detection+3

Identify AI-generated voice and video in virtual meetings while verifying participant authenticity across Zoom, Webex, and Microsoft Teams.

VeriCall Technology

ANI validationcall analysis+3

Assess call risk without interrupting agent or customer experience using ANI validation and spoof detection in IVR systems.

Practice

automated deliverycompliance reporting+3

Tailored cybersecurity training that fits naturally into people's day, delivering customized education through simulations and scenario-based learning.

PIXM

AI computer vision phishing protectionBrowser-native zero-day phishing defense+3

We stop phishing attacks with effortless AI technology

Phishing Protection

AI detectionbrowser extension+4

AI Computer Vision technology that detects and stops phishing attempts in web browsers across applications, platforms, and devices

PowerDMARC

DMARC monitoring and analysis+10

At PowerDMARC, we are on a mission to redefine domain and email security, making digital communications safer for organizations and governments around the globe. We are a team of passionate security experts committed to providing cutting-edge domain and email security solutions to safeguard your business's reputation from online threats.

PreVeil

End-to-end encrypted email with zero-knowledge architecture

We started PreVeil to bring radically better security to ordinary business and personal communication and information storage.

approval workflowse-discovery+3

End-to-end encrypted email service that integrates with Outlook, Gmail, and Apple Mail while allowing users to maintain their existing email addresses.

Proofpoint

Detect AI-augmented email threats+11

Proofpoint is a human-centric cybersecurity platform focused on protecting organizations from email-based and identity-driven attacks such as phishing, business email compromise (BEC), and social engineering. It secures inbound and outbound communications using advanced threat detection, AI-driven impersonation analysis, URL and attachment sandboxing, and behavioral risk signals. Beyond email protection, it extends into data loss prevention (DLP), insider threat detection, and security awareness training to reduce human risk across the organization. The platform integrates across email, cloud applications, and collaboration tools to protect sensitive data and stop attacks targeting users.

Proofpoint 365 Total Protection

Automated awareness benchmarking+10

Proofpoint 365 Total Protection is a Microsoft 365 security suite that includes built-in security awareness training and adaptive phishing simulations for user behavior testing. In the security awareness scope, it is positioned around realistic spear-phishing exercises, multilingual phishing tests, and reporting-focused training for Microsoft 365 customers, including MSP-managed environments. It fits buyers that want awareness content tied to Proofpoint threat intelligence and user-risk measurement without adopting a separate standalone awareness platform. Adjacent Microsoft 365 security functions exist in the broader bundle, but are outside this scope.

DMARC Manager

Security Awareness Service

Domain security platform that prevents email impersonation and phishing by managing DMARC, DKIM, and SPF authentication protocols.

alertsBIMIdashboard+3

Collaboration Security Prime

Continuous employee training and simulated phishing campaigns to develop secure behavior and reduce human security vulnerabilities.

AI-Powered ThreatFlipSSO Password Guard+2

Premium solution for protecting trusted interactions and stopping AI-scaled attacks across multiple channels including email, messaging, collaboration tools, and cloud applications.

Core Email Protection

Agentic automationAnomaly analysis+5

Stop 99.999% of Email Security Threats through industry-leading AI-powered threat detection deployed via API or secure email gateway.

ZenGuide

AI agentsBehavior trackingGamification+4

Deliver targeted, risk-based security awareness training by automating personalized education based on individual user risk profiles.

Authenticator

biometric-authcode-importcross-platform+3

Private, secure 2FA authenticator app that generates one-time codes and syncs securely across devices.

Calendar

encryptionmobile-appsnotifications+3

Secure team calendar with end-to-end encryption for schedules, meetings, and calendar data.

Mail

2facalendar-integrationcustom-domain+4

Secure business email and calendar, trusted by millions, with end-to-end encryption and centralized admin controls.

Meet

calendar integrationE2E encryption+2

Video calls that keep your conversations private, with end-to-end encryption for all calls, screen shares, and chat messages.

PsyberCog Labs Inc.

Behavioral science-based risk scoring+5

PsyberCog Labs provides a human risk management platform that applies behavioral science to quantify and mitigate workforce security risks. The PATH™ and PATHMap™ platforms move beyond basic training to provide data-driven measurement of security culture and predictive modeling for employee behavior. This solution complements traditional SAT (Security Awareness Training) by providing CISOs with validation metrics and decision-support tools for human-centric security investments.

RapidIdentity Authentication

MFAmobile authenticationSSO+2

Provides multi-factor authentication methods that secure digital learning and administrative applications without slowing users down.

Payment Fraud Intelligence

account takeover detection+6

Pre-attack defense that identifies compromised cards and infected merchants with intelligence.

Redflags

Delivers real-time desktop nudges that intercept users during high-risk actions and prompt them to reconsider before proceeding.

Redflags is a human risk management platform that utilizes on-device behavioral telemetry to provide real-time 'nudges' or interventions at the point of risk. Unlike traditional periodic training, it identifies risky user behavior, such as clicking suspicious links or downloading unvetted files, as it happens and educates the user in context. This approach aims to build secure habits and reduce the human attack surface without disrupting the user's workflow.

Retarus Secure Email Platform

Advanced Threat Protection+10

Retarus Secure Email Platform is a cloud-based secure email gateway focused on protecting business email traffic from spam, phishing, malware, BEC, spoofing, and malicious links. It is positioned as a modular email security service for organizations that want gateway-based filtering with data-sovereignty controls and support for complex email infrastructures. Retarus also extends into adjacent areas such as email continuity and transactional email delivery, but its Email Security scope centers on inbound and outbound protection and remediation for enterprise mail environments.

AI sandboxingemail archiveencryption+3

The comprehensive solution for email security made in Europe with advanced threat protection, AI-powered sandboxing, and post-delivery protection.

Right-Hand Cybersecurity

Adaptive phishing simulations+10

Right-Hand Cybersecurity is a security awareness and phishing simulation vendor focused on behavior-based human risk reduction. Its platform creates organization-specific phishing and vishing simulations, uses employee behavior and live security signals to tailor interventions, and delivers reporting and remediation through email and collaboration workflows. It is best suited for teams that want phishing readiness, report-button workflows, and training tied to real user actions rather than static annual compliance content. The company also offers broader human risk management capabilities, but the profile here is limited to awareness and simulation.

Agentic Security Awareness

AI training agentDeepfake vishing+2

AI-powered platform that deploys intelligent agents to simulate voice-based deepfake vishing attacks, contextually informed phishing emails, and delivers adaptive training content against modern social engineering threats.

Human Risk Intelligence

Behavioral analysisReal-time interventions+3

Continuous workforce risk measurement platform that ingests behavioral and security signals to create a unified Workforce Risk Index score and deliver contextual interventions through Slack, Teams, and email.

Phishing Simulations and Triage

Adaptive remediationAutomated triage+3

Phishing defense platform that deploys realistic AI-informed simulations, enables one-click reporting integration with Microsoft 365 and Google Workspace, automates triage workflows, and delivers contextual learning reinforcement.

AI training agentContent library+3

AI-powered security awareness training platform that personalizes training delivery by role and risk level, rapidly converts organizational documents into threat-relevant modules, and delivers continuous just-in-time interventions through everyday communication tools.

Riot Security

Chat-based awareness training in Slack and Teams

Riot Security is a security awareness and employee security posture management platform focused on reducing human-risk exposures through training, phishing simulations, and employee-facing security nudges. Based on the available product information, it is positioned for companies that want to run ongoing awareness programs for distributed teams rather than one-off training courses. The product appears best suited for small to mid-sized organizations that need Slack- or Teams-based delivery, breach notifications, and phishing exercises as part of a structured awareness program. Adjacent employee posture features are mentioned by the vendor, but the core fit is security awareness.

Awareness (Albert)

Conversational trainingProgress tracking+2

Empower better decision-making with tailored conversations and real-time support through conversational AI cybersecurity coaching.

Inbox

AI-powered hotlineEmail reporting+2

24/7 cybersecurity hotline for managing suspicious email reports and threat classification with real-time intelligence.

Simulation

AI template generationPassword inspection+2

Practical phishing training through simulated exercises that test employee vulnerability to social engineering attacks.

Slash

Catch the attacks others miss through advanced email threat detection and prevention using semantic analysis.

Email threat detection+4

Studio

AI content generationChat integration+2

Create custom cybersecurity training courses that match your company's exact needs with AI-powered content generation.

Riskified

Real-time fraud decisioningAI-based order approvalChargeback protection+7

AI fraud prevention fueling ecommerce success

iShield Key 2

FIDO2FIPS 140-3hardware security+3

Hardware security key providing phishing-resistant authentication through FIDO2 and PIV protocols with FIPS 140-3 Level 3 certification.

SafeHabits

Fully managed awareness campaigns+7

SafeHabits is a fully managed human risk management platform providing habit-driven security awareness and audit-ready compliance evidence. Designed for lean organizations from startups to mid-market, it delivers immediate value with no program administration on your side.

SalaX

End-to-End Email Encryption+9

SalaX Secure Mail is an email encryption-focused solution within the Email Security category, designed to protect confidential communications through AES-256 encryption and ensure full data sovereignty. The vendor operates primarily as a specialized encryption tool rather than a comprehensive gateway or AI-driven inbox defense platform, making it best suited for organizations with strict data privacy requirements, regulated industries, or those needing to embed secure messaging into existing email services without MX changes. While SalaX offers adjacent secure messaging capabilities for chat and video, its core Email Security role centers on encryption and workflow integration, not threat detection or spam filtering.

Authentication Manager

authenticationhardware-backed securityMFA

Enables smarter sign-ins and seamless handoffs across devices.

SANS Security Awareness

Security awareness training modulesScenario-based attack simulations+10

SANS Security Awareness is the workforce training line from SANS Institute focused on helping organizations build security awareness programs for end users, managers, and technical staff. It is positioned around expert-authored, role-specific content rather than generic compliance video courses, with separate offerings for general workforce training, phishing, and specialized roles such as developers, IT administrators, ICS engineers, and business leaders. It is best suited for regulated and risk-sensitive organizations that want SANS-branded content and measurable awareness outcomes. Adjacent offerings include broader workforce security and risk training programs.

End-User Security Awareness Training

compliance trainingsecurity awareness training

Provides a curated library of 50+ training modules across 6 security tracks, localized into 34+ languages for global compliance and cultural adaptation.

Phishing Simulation

automated trainingphishing simulation

Delivers real-world phishing simulations with customizable tests, just-in-time training modules, and automated remedial courses to reduce user vulnerability to email attacks.

Sasa Software

Content Disarm and Reconstruction for email attachments

Sasa Software is a specialized cybersecurity vendor focused on Content Disarm and Reconstruction (CDR) technology, with its GateScanner suite delivering file-based threat protection across email channels. In the Email Security category, the company neutralizes undetectable malware in attachments by dismantling and reconstructing files without relying on signatures or behavioral analysis. Best suited for government, critical infrastructure, financial services, and healthcare organizations requiring defense against zero-day and APT threats, Sasa Software holds a niche position as a CDR pioneer recognized by the Israeli Cyber Command and Frost & Sullivan. While the vendor offers CDR for file exchange and web downloads, its email capability is the primary entry point for buyers evaluating attachment sanitization.

GateScanner

File-based attack prevention platform that dissects and detoxifies every incoming file, email and attachment, removing known and previously unseen malware through Content Disarm and Reconstruction technology.

CDRDLPEmail security+3

SecureAuth

Push-based login approval+10

We envision a world where more security doesn't equal more obstacles, where protection and experience work together.

Customer Authority

account takeover detectionadaptive MFA+8

Consumer identity and fraud prevention delivering secure, frictionless experiences with continuous fraud protection beyond login.

Secure Code Warrior

Hands-on secure coding training+10

Secure Code Warrior is a developer-centric security platform that focuses on building secure coding skills through gamified learning and real-time coaching. It integrates directly into the developer's workflow (IDE) to provide context-aware security guidance, reducing the introduction of vulnerabilities at the source. The platform replaces generic, compliance-driven security training with tiered, language-specific challenges that help organizations move toward a preventative DevSecOps model.

SecureFlag

Hands-on secure coding labsWeb-based vulnerability simulations+10

Building foundations for a future free of Software Vulnerabilities

Platform

APIsLeaderboardsSecure coding training+2

Hands-on secure coding training in real development environments covering 45+ technologies and 150+ vulnerability types.

ThreatCanvas

Developer trainingThreat modeling+1

Automated threat modeling platform that helps organizations reduce vulnerabilities through threat modeling combined with developer training.

SecurInbox

account takeover prevention+4

AI-powered email threat protection that detects phishing attacks, blocks malicious links, identifies account takeover attempts, and prevents VIP impersonation in real time.

Security Journey

Role-based developer learning paths+11

At Security Journey, we believe that software security starts with the developer. Our mission is to engage and educate developers and their organizations in secure coding through a learner-first approach, delivering the highest-quality, most relevant training that empowers them to address real-world challenges and strengthen digital security.

AI Advantage

AI security trainingassessments+2

All-employee AI training that turns access into real capability, providing hands-on skill-building and practical instruction through real AI Skill Labs for non-developer teams across the organization.

Sendmarc

DMARC implementation and management+11

At the heart of everything we do, is our purpose of making the Internet a safer place for all.

BIMI

BIMI managementCertificate support+2

Display your brand logo next to authenticated emails in supported inboxes to enhance trust and reduce impersonation success.

DMARC

BIMI supportDMARC monitoring+4

A practical platform to implement, monitor, and enforce DMARC across domains to reduce email spoofing and impersonation risk.

SEON

Real-time device intelligence+11

SEON's mission is to redefine global fraud prevention by safeguarding the entire customer journey, allowing businesses to operate confidently and stay ahead of evolving risks.

Case Management

alert consolidationAML screening+3

An AI-supported platform that streamlines fraud and AML investigations by centralizing alerts, customer data, and risk signals in a single system while automating workflows and regulatory reporting.

Device Intelligence

behavioral analysisdevice fingerprinting+3

Analyzes hundreds of real-time device signals to detect fraud by identifying emulators, hidden proxies, remote access tools, and multi-accounting attempts across user interactions.

Digital Footprint

bot detectiondigital footprint analysis+3

Verifies user identities before KYC by analyzing real-time signals from 350+ digital and social platforms to validate digital histories and assess risk.

Document Verification

document verificationidentity verification+3

Verifies government-issued IDs are genuine while adding fraud context to reveal whether the person presenting the document is who they claim to be.

Fraud Prevention

Account takeover detectionBot detection+4

A unified platform that detects and prevents fraudulent activity in real time by analyzing 1,100+ signals across digital footprint, device intelligence, and behavioral data.

Identity Verification

Address verificationAML screening+3

An identity verification platform that combines document checks, biometric verification, and data validation enriched with fraud signals to confirm user identity while detecting stolen, altered, or synthetic IDs.

Liveness Detection

Deepfake detectionDocument matching+3

A biometric verification tool that confirms a real, live person is present during identity verification, not a photo, replayed video, mask, or deepfake.

Payment Screening

AML complianceCrypto validation+3

Real-time transaction screening software that checks payments against global sanctions lists, bank identifiers, and crypto wallets to block illicit transfers before settlement.

Sift

Instant fraud detectionMachine learning risk scoringCustom fraud rules+7

The Fraud Platform That Turns Risk Into Revenue

Account Defense

ATO detectiondevice fingerprinting+3

Detects and blocks account takeover in real time, giving teams the intelligence and control to make confident login decisions and reduce operational burden.

Payment Protection

BOPIS abuse detectioncard testing+3

Evaluates transactions in real time to block risky payments while approving legitimate customers, processing transactions through AI/ML models in under 150 milliseconds.

Signifyd

Real-time fraud decisioning+11

We empower friction-free commerce: Friction-free customer experience without worry about fraud and consumer abuse

Account Protection

ATO detectionbehavior analysis+2

Defend customer accounts and detect account takeover attempts instantly with network data and behavioral analysis, protecting merchants with a 100% financial guarantee.

Authorization Rate Optimization

approval optimizationfraud detection+2

Reduce false declines and improve bank authorization rates using pre-authorization fraud detection powered by global commerce data.

Automated Risk Decisioning

API integrationfraud filteringidentity recognition+1

Automate order decisioning with speed and accuracy through instant recommendations and fraud identification for payment providers.

Chargeback Recovery

chargeback recoveryevidence compilationfraud detection+1

Automate the dispute process and reclaim sales lost to chargeback fraud through machine learning and network data intelligence.

Complete Chargeback Protection

Guaranteed Fraud Protection

Eliminate chargeback liability entirely through guaranteed protection against both fraud and non-fraud chargebacks.

AI-powered decisioning+4

Approve more orders with confidence through AI-powered fraud detection backed by financial guarantees against fraud chargebacks.

Adaptive ML models+5

Instant Refunds

Instant refundsML risk scoring+3

Deliver immediate, risk-free refunds designed to enhance customer loyalty and protect revenue.

Return Abuse Prevention

Instant refundsML risk scoring+3

Evaluate return requests against consumer behavior history to block abusive returns while streamlining legitimate customer interactions.

Universal Multi-Factor Authentication

Extends MFA protection to every resource in an organization including legacy applications, command-line tools, and local Windows logins without modifying them.

legacy app supportMFA+4

Skysnag

Automated DMARC enforcement with p=reject policyReal-time SPF, DKIM, and DMARC authentication

Skysnag is a cloud email authentication and domain trust product focused on DMARC enforcement, SPF, DKIM, BIMI, MTA-STS, and TLS-RPT. In the Email Security category, it is positioned around stopping domain spoofing and impersonation while improving authenticated message delivery and brand display in inboxes. It is best suited for organizations that need automated DNS-based email authentication controls without running a large manual DMARC program, especially teams protecting a brand domain and third-party senders. Adjacent capabilities such as domain trust and deliverability are only relevant where they support email authentication.

BrandGuard

brand impersonation preventiondomain cloning protectionthreat neutralization

Advanced protection against cloning sites and credential harvesting prevention

Certify

BIMI activationemail authenticationtrademark registration+1

Certify your brand with the highest identity standard globally

Comply

compliance verificationDKIM alignment+2

Ensure SPF and DKIM alignment to meet the latest sender authentication requirements and guarantee emails arrive at their destination

Monitor

compliance automationdomain health monitoringsuspicious address detection

Real-time domain visibility for everyone

Protect

DMARC enforcementdomain guard monitoringsender detection+1

Automate DMARC enforcement for unparalleled email security

Validate

bot protectionemail verificationform security+1

Email Verification built with precision

SlashNext

Generative AI for BEC variant detection+8

SlashNext is an email security vendor focused on stopping phishing, business email compromise, credential theft, and QR-code-based attacks before they reach users. Its cloud email security products use predictive detection techniques rather than relying only on signatures or delayed reputation feeds, and the company has been positioned as a strong specialist in advanced social-engineering defense. It is best suited for organizations that want protection for Microsoft 365 and other enterprise email environments against zero-hour email threats. SlashNext also sells adjacent messaging-security capabilities, but those are outside this profile scope.

Smartlockr

End-to-end email encryption with AES and RSA+8

Smartlockr is a people-centric email security and secure file sharing platform that enables organisations to send and receive sensitive information safely without changing existing workflows. It integrates with standard email environments to secure messages and attachments, helping prevent data leaks and breaches through encryption and policy-based protection. The platform focuses on usability, allowing non-technical users to easily apply strong security controls. Leveraging machine learning and continuous detection capabilities, Smartlockr helps classify and protect sensitive data in transit, reducing the risk of human error while maintaining seamless communication and compliance with data protection requirements.

SmishAlert

Learn from real messaging attacks+6

SmishAlert is a mobile-first security awareness platform that specializes in defending against SMS-based phishing (smishing), QR code scams (quishing), and mobile social engineering. It provides real-time analysis of incoming messages and reinforces secure user behavior within native mobile workflows. The platform complements traditional email-centric security awareness programs by addressing the growing threat of mobile-based corporate credential theft.

Report

fraud detectionimmediate assessment+2

Gives employees, customers, and students a trusted place to send suspicious messages and get immediate guidance with plain-language assessments within moments

Multi-layered phishing and BEC defense+11

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Phish Threat

Simulated phishing attack campaigns+11

Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise.

Spambrella

Spam and phishing detection+10

Spambrella is the best email security and continuity solution to strengthen your business reputation, encrypt sensitive data, and meet regulatory requirements. We provide effective email protection services and real-time cyber threat detection while spreading user awareness among stakeholders.

Email Archiving & eDiscovery

complianceeDiscoveryemail archiving+2

Enterprise-class cloud-based email preservation and eDiscovery solution for small to mid-sized businesses with unlimited storage and centralized browser-accessible archives.

Email Continuity Service

disaster recoveryemail continuity+3

Disaster recovery solution designed to eliminate email downtime and maintain uninterrupted business communications during server failures.

Email Threat Protection

attachment sandboxingBEC detection+4

Cloud-based email threat protection service that blocks phishing, malware, and business email compromise attacks using AI-powered detection powered by Proofpoint's threat intelligence.

Managed Security Awareness Training

auto-enrollmentmulti-language support+2

Fully managed security awareness solution that handles threat simulations and training delivery, eliminating administrative overhead.

behavioral reportingmulti-languagephishing simulations+1

Security awareness training tool that delivers simulated phishing emails to employees to measure responses and provide educational landing pages.

assessment questionsauto-enrollmentinteractive modules+1

Comprehensive interactive training platform that equips employees with practical knowledge and phishing protection methodologies to minimize people-related security risks.

SpamExperts

Incoming Email FilteringOutgoing Email FilteringReal-Time Cloud Filtering+8

Affordable enterprise-grade email security built for web hosts and ISPs

Email Archiving

audit trailsencryptionlegal hold+1

Secure, encrypted archiving for inbound and outbound email, built to meet compliance requirements, reduce storage costs, and ensure data continuity.

Incoming Filter

malware blockingphishing detection+3

Enterprise-grade filtering that blocks spam, phishing, malware, and ransomware in real time, keeping inboxes clean, users safe, and email flowing even during outages.

Outgoing Filter

Detects and blocks malicious or compromised email traffic before it leaves an organization's network to prevent IP blacklisting and reputation damage.

abuse detection+4

SpamTitan by TitanHQ

Phishing and malicious email blocking+11

SpamTitan by TitanHQ is a cloud-based or on-premises email security gateway that filters inbound and outbound emails, blocking spam, phishing, malware, ransomware, and APTs with a 99.99% spam catch rate and 0.003% false positive rate. It integrates with Office 365, Google Workspace, Active Directory, and LDAP via a web-based admin portal. Designed for MSPs with multitenancy and granular per-domain policies, it serves SMBs, enterprises, and service providers seeking rapid deployment without agents.

PhishTitan

auto-remediationBEC defensephishing detection+2

Phishing protection and remediation solution for Microsoft 365.

SafeTitan

assessmentsawareness campaigns+3

Security awareness training with real-time phishing simulations and employee protection.

SpamTitan

machine learningmalware detection+3

Email security blocking phishing, malware, spam, viruses and other malicious email threats.

Comment Moderation

bot detectioncomment filtering+3

Uses artificial intelligence to automatically identify and remove harmful comments including hate speech, scams, bots, phishing attempts and spam comments from social media posts

Phishing Protection

account protectionDM filtering+3

AI-powered platform that detects and removes phishing attempts, malicious messages, and scams across social media channels in real time

Financial Threat Protection

batch processingbreach identification+4

Detects stolen payment card data from malware-infected devices and criminal sources before fraudsters can use it, enabling preventive action.

StealthMail

Replaces standard email content transmission with authenticated 'Stealth-Links' that contain no user information, bypassing SMTP vulnerabilities and preventing intermediaries from accessing message bodies or attachments

Email needs to earn the right to be trusted by millions of people and organizations with their most sensitive information. We see a future where everyone is confident that their private correspondence is genuinely secure.

StealthMail for Gmail

Access revocationAttachment control+2

Email security solution that helps enterprises secure communication with patented data transfer technology SDNP to mitigate email security risks by providing end-to-end encryption and data control.

StealthMail for MS Teams

Access controlDevice fingerprinting+2

Security solution that enables users to send secure messages in Microsoft Teams with end-to-end encryption, protecting confidential communications and attachments while maintaining user control over encryption keys.

StealthMail for Office 365

Access controlActivity monitoring+2

End-to-end encryption for Outlook that grants organizations exclusive control over their encryption keys to safeguard sensitive communications against advanced threats and data breaches.

Stripe Radar

Machine learning fraud detection+10

Stripe Radar is Stripe’s fraud detection and prevention product for payment businesses that want real-time screening of card-not-present transactions, account takeovers, and customer abuse within the Stripe stack. It uses machine learning, device and behavioral signals, and configurable rules to block, review, or allow payments before authorization completes. Radar is strongest for teams already processing through Stripe because it is built into the payments platform and requires little or no separate deployment. It is used by merchants that need automated fraud controls plus dispute-related fraud prevention, rather than a standalone fraud platform.

Radar

account abuse detectionbot detection+4

AI-powered fraud and risk management solution that detects and prevents transaction fraud, account fraud, and customer abuse while managing disputes.

StrongestLayer

LLM-based intent analysis+10

StrongestLayer is an LLM-native email security platform designed to combat the surge in sophisticated, AI-generated phishing and social engineering attacks. Unlike legacy SEGs that rely on signatures or basic heuristics, it uses deep language modeling to understand intent and context within communications. The platform integrates via API to provide real-time scanning and "in-the-moment" user coaching to improve organizational resilience.

Inbox Advisor

phishing detectionthreat verification+1

An AI-powered email verification tool that answers security questions about senders directly within Outlook and Gmail.

Threat Hunt

campaign detectionemail analysis+1

A platform that sweeps an entire organization's mailboxes to locate any instance of a suspicious indicator of compromise in minutes.

Threat Triage

AI analysisBEC detectionthreat triage+1

An AI-powered email security platform that pre-investigates threats and delivers triaged alerts to security teams with context and reasoning.

Sublime Security

Autonomous detection coverage creation+8

Sublime Security is the adaptive, AI-powered cloud email security platform that combines best-in-class effectiveness with unprecedented visibility and control. The open platform allows security teams to have transparency and flexibility in their email environment to spend less time on email-originated incidents. Advanced teams can customize detections, threat hunt, extend Sublime into their SIEM or SOAR, and collaborate with other teams.

Swissbit

Phishing-resistant passwordless authentication+10

Swissbit is a leading provider of storage and security solutions for industrial and IoT applications.

iShield Key 2

FIDO2 authenticationHardware security key+2

An all-in-one security key for digital and physical access supporting phishing-resistant FIDO2 authentication

Terranova Security

Role-based security awareness training+11

Terranova Security is Fortra’s security awareness training product focused on changing employee behavior through phishing simulations, training content, and program reporting. In this category, it is positioned for organizations that want to run recurring awareness campaigns, test human risk, and track participation and learning outcomes. Its core value is combining training delivery with simulated attack exercises and measurement of knowledge retention. It is best suited for security teams, compliance teams, and larger enterprises that need structured awareness programs rather than standalone learning content.

Thales SafeNet

Multi-factor authentication for many use cases+10

Thales SafeNet is an enterprise MFA and access management platform combining authentication, SSO, and policy enforcement across on-premises, cloud, and virtual environments. The portfolio includes hardware tokens (eToken, smart cards, FIDO2 security keys), software authenticators, and the cloud-based SafeNet Trusted Access service. SafeNet serves large organizations requiring high-assurance authentication across distributed infrastructure, with particular strength in government and regulated sectors through FIPS 140-2 and Common Criteria certifications.

SafeNet Trusted Access

Cloud-based access management service enabling organizations to expand multi-factor authentication coverage across all users and applications with intelligent single sign-on capabilities.

adaptive authFIDO2MFA+3

Threatcop Inc.

AI-powered adaptive phishing simulationMulti-vector attack simulation support+4

Threatcop is focused on keeping your people safe against the evolving cyber threats.

DMARC

Learning Management System

Email authentication and anti-spoofing solution that keeps spoofers away from email domains while increasing email deliverability and engagement through enforced DMARC compliance and BIMI.

BIMIDomain monitoring+3

Content libraryLMSProgress reporting+2

One-stop cybersecurity learning management system that delivers personalized, interactive security awareness training using AI with a 2000+ content library across 8 formats.

Phishing Incident Response

Attachment scanningEmail analysis+3

Transforms employees into a security shield against phishing by streamlining threat reporting with one-tap reporting and AI-driven threat analysis.

Employee trackingPhishing simulation+3

AI-powered security awareness training that simulates real-world attacks such as phishing, vishing, deepfakes, and ransomware to assess and reduce human-caused security vulnerabilities.

Uses Adaptive AI to defend inboxes against advanced phishing attacks with effortless deployment and unified endpoint-email management without MX record changes.

ThreatLocker Ops

Ongoing cybersecurity training sessionsPhishing simulations and drills+10

ThreatLocker Ops is described in public material as part of ThreatLocker’s broader endpoint and zero-trust security portfolio, not as a standalone security awareness training suite. In the security awareness training category, the available evidence is limited to high-level claims about educating users around real-world threats, so buyers should treat it as an adjunct awareness capability rather than a dedicated LMS-style platform. It is best suited for organizations already using ThreatLocker that want threat-context education tied to policy and endpoint behavior.

Adapt Multi-Factor Authentication

Fast deploymentHardware token options+2

Managed enterprise-grade authentication service providing second-factor verification and identity verification across organizational applications with self-service enrollment and risk-based access policies.

Transmit Security

Passwordless MFA with passkeysBiometric authentication flows+10

Transmit Security is an enterprise identity vendor whose MFA capabilities are delivered through its Mosaic platform, which combines passwordless authentication, biometrics, and step-up controls for customer-facing logins. In the MFA category, it is best known for FIDO-based authentication and app-less biometric methods that reduce password dependence while supporting high-assurance access. Its core buyers are large enterprises in regulated sectors such as banking, insurance, and retail that need strong customer authentication across web and mobile channels. The company also sells adjacent CIAM and fraud-prevention capabilities, but those are outside this profile’s scope.

Mosaic Authentication

biometricsmagic linksMFA+4

Passwordless, multi-factor, and risk-based authentication in one easy-to-use platform

Mosaic Fraud Detection and Response

AI analyticsAPP fraud detection+4

AI-driven solution that enables businesses to proactively detect and respond to fraud threats

Mosaic Identity Verification

AI/ML analysisdeepfake detectiondocument templates+3

Combines cutting-edge AI and ML technologies with intuitive user experience to verify identities with supreme accuracy

Email and Collaboration Security

Account compromise detection+5

Stop advanced email threats by proactively managing human risk and blocking phishing, scams, ransomware, and business email compromise

Phishing and spam filtering+11

Trend Micro Email Security provides layered email threat protection for Microsoft Exchange, Microsoft 365, Gmail, and on-premises solutions. It leverages XGen security with machine learning, Deep Discovery sandbox analysis, and data loss prevention to block phishing, ransomware, BEC, and zero-day malware. Key capabilities include document exploit detection in PDFs and Office files, URL time-of-click protection, and source authentication via SPF, DKIM, DMARC. Integrated with Trend Vision One for shared threat intelligence from Smart Protection Network, it offers centralized visibility. Best for enterprises needing multi-platform email defense with minimal management.

Trustmi

Behavioral AI fraud detection+10

Trustmi is an AI-powered business payments security platform designed to eliminate cyber-enabled fraud and Business Email Compromise (BEC). It sits between email communications and financial systems to identify behavioral anomalies in the payment lifecycle, replacing fragmented manual verification processes. The solution provides visibility into the end-to-end money movement process to detect vendor impersonation and unauthorized account changes.

Behavioral AI Email Security

Behavioral AIEmail threat detectionFraud prevention+1

Detect and prevent socially engineered email attacks targeting financial operations, including business email compromise and invoice fraud

Behavioral AI Payment Security Platform

Behavioral AIFraud investigation+2

Payment security without blind spots - detect and prevent cyber-enabled fraud throughout the entire payment process using behavioral AI

Payment Flows

Behavioral AIDuplicate detectionPayment validation+1

Prevent duplicate payments, mismatches, and errors in payment runs with automated duplicate invoice detection and payment validation

Vendor Onboarding & Management

Bank verificationContinuous monitoring+2

Onboard vendors faster and catch fraud before approval, then continuously verify their identity and banking details

Trustwave MailMarshal

Anti-spam and anti-malware filteringBusiness Email Compromise protection+5

Trustwave MailMarshal is an email security gateway focused on filtering inbound and outbound mail for phishing, malware, spam, ransomware, business email compromise, and data leakage. It is positioned for organizations that want layered controls, policy enforcement, and deployment flexibility across on-premises, cloud, hybrid, and Microsoft 365 environments. Trustwave and LevelBlue describe it as a long-established product used by enterprises, government organizations, and service providers that need centralized email threat filtering and auditability rather than a lightweight inbox add-on.

TryHackMe

Interactive cyber security awareness trainingReal-world scenario-based learning+9

TryHackMe’s Security Awareness offering is a browser-based training module focused on teaching end users how to recognize and respond to common cyber threats through interactive scenarios and hands-on exercises. Within the security awareness category, it stands out for using lab-style, practical content rather than static slide decks or policy quizzes. It is best suited for organizations that want to train employees on phishing, account security, and safe security behavior, as well as teams that need awareness content for onboarding or recurring reinforcement. The platform also supports individual learners and broader cybersecurity training, but those adjacent uses are secondary here.

Upfort

Auto-generation of mock phishing emails with realistic templates to simulate real-life phishing attacks without requiring security specialty skills

Upfort is a security awareness and phishing simulation vendor that enables businesses to launch simulated phishing attacks against their teams with minimal IT involvement, using a few-click interface. Its Cyber University delivers enterprise-scale, interactive, on-demand security training covering modern cyber tactics. The platform auto-generates mock phishing emails mimicking real-life attacks via suspiciously authentic emails, websites, or pop-ups, then captures employee response insights to measure preparedness. Upfort is best suited for small to mid-sized businesses and MSPs seeking fast deployment and automated remediation. While it offers the Upfort Shield multi-layer defense platform, its core strength lies in phishing simulation and awareness training.

Inbox Defender

attachment scanningemail security+3

AI-powered email security solution designed to combat phishing, ransomware, and financial fraud using advanced language models to detect threats that traditional email filters miss

Upfort Shield

browser protectionemail protection+3

Unified cybersecurity and insurance platform delivering turnkey layers of cyber protection proven to significantly lower the likelihood of ransomware, breaches, and other cybersecurity incidents

Valimail

Automated DMARC enforcement and policy management

Valimail is an email authentication vendor focused on stopping phishing and domain spoofing through automated DMARC enforcement, SPF management, DKIM alignment, and BIMI support. It is positioned as a leader in zero-trust email authentication and is used by enterprises, federal agencies, and fast-growing organizations that need to move domains to DMARC enforcement with limited manual DNS work. In scope for email security, its core value is identity validation for outbound mail and brand protection rather than content inspection or mailbox threat detection. It also offers a free discovery product for visibility into sender usage.

Amplify

Enables companies to display their brand logo directly in customer email inboxes by automating the process of acquiring and managing BIMI certificates and logo configuration.

Enforce

Automates DMARC deployment at scale to protect domains from phishing and impersonation attacks while eliminating complex DNS configuration work.

Monitor

Free DMARC monitoring that identifies 100% of your services sending activity from your domains to see where you're passing or failing DMARC.

Interceptor

DLPemail securityphishing prevention+1

Phishing and malware protection for email and browser security.

Vircom modusCloud

Spam and phishing protectionMulti-layer anti-virus defense+10

Protect more without growing your team. Get leading email security, enhanced by Vircom.

modusCloud

DLPemail archivingemail continuity+4

Cloud-based email security solution that intercepts and rapidly filters all inbound traffic offsite, blocking threats before they reach your servers.

modusGate

connection-level loggingcustom filtering+4

On-premises email security gateway that delivers robust protection with complete control over security settings and data sovereignty.

OnDMARC

Email authentication solution that manages DMARC, DKIM, SPF, BIMI, and MTA-STS records to prevent domain spoofing and email impersonation.

BIMIDKIM management+5

Proofpoint Essentials

BEC preventionDLPemail archiving+5

Enterprise-grade email security for SMBs delivering advanced threat detection and multi-layered defense against phishing, malware, ransomware, and business email compromise.

behavior changecompliance reporting+4

Cybersecurity education platform using phishing simulations and personalized micro-learning modules to transform users into active defenders and reduce human-factor security risks.

for Gmail

Access trackingEmail encryption+3

Email encryption and access control for Gmail that enables senders to maintain persistent control over their data through message revocation, expiration dates, and download restrictions.

for Outlook

ABACEmail encryptionExpiration dates+2

Protects messages and attachments in Outlook for Microsoft 365 with granular security controls like message revocation, expiration dates, and download restrictions.

Votiro

Real-time file sanitization for emailContent Disarm and Reconstruction for email+6

Secure Your Browsers While Preserving User Choice

AuthPoint

Credential monitoringDevice trust+4

The identity layer of the Unified Security Platform that protects user access with multi-factor authentication and passwordless authentication across multiple environments

YazamTech

Content Disarm and Reconstruction for emails+6

YazamTech Ltd. is a specialized cybersecurity vendor focused on Content Disarm & Reconstruction (CDR) technology, not a dedicated Email Security platform. While their CDR solutions can be applied to sanitize files within email streams to block infected attachments, they do not offer core email security capabilities like spam filtering, phishing detection, BEC prevention, or secure email gateways. The company is best positioned as a data security specialist for organizations needing to neutralize advanced threats in file streams, rather than as an email security buyer's primary solution. Their market position is niche within data sanitization, not email protection.

Sanitizes threats in email messages and attachments before inbox delivery

Yubico

Phishing-resistant multi-factor authentication+9

Yubico sells hardware security keys for **multi-factor authentication** and passwordless sign-in. Its YubiKey line supports phishing-resistant login across modern and legacy environments using standards such as FIDO2/WebAuthn, FIDO U2F, OTP, smart card, and OpenPGP, with variants that add biometrics or PIN use. Yubico is best suited for organizations that want portable, hardware-backed second factors for workforce, admin, and high-assurance user access. The company also offers adjacent authenticator software, but its core MFA value is the security key itself.

Yubico Authenticator

The safest authenticator app experience across mobile and desktop with hardware-backed security through integration with YubiKey devices

Cross-platform support+3

YubiKey 5 Series

The world's #1 multi-protocol security key offering FIDO2/WebAuthn, U2F, Smart card, OpenPGP, and OTP support

YubiKey as a Service

Enterprise-grade subscription service offering hardware-backed phishing-resistant authentication at scale for global workforces and customers

Enrollment services+3

YubiKey Bio Series

The gold standard in biometric authentication in the age of AI, combining biometric authentication with robust encryption technology

Biometric verification+3

Zepo Intelligence

Real-time social engineering detection+5

Zepo Intelligence provides a cloud-based platform that combines real-time detection of social engineering attacks with adaptive employee training. The system monitors email, chat, SMS, voice and video channels to identify phishing, vishing, smishing and deepfake attempts, then automatically triggers personalized training for employees who are targeted or considered at risk. Simulations are generated using intelligence from real detected threats rather than generic templates, and a unified dashboard tracks human risk metrics and training outcomes across the organization. It is aimed at mid-to-large enterprises seeking to reduce human-layer vulnerabilities and integrates with existing security infrastructure without requiring a stack replacement. The company states compliance with ISO 27001, SOC 2 and GDPR.

Zertificon

Server-based email encryption and digital signing using S/MIME and PGP protocols to ensure confidentiality and integrity of all email traffic

Zertificon Solutions, a Germany-based vendor founded in 2004, specializes in email encryption through its Z1 SecureMail Gateway, a server-based gateway for encrypting and signing email traffic using S/MIME and PGP standards. The company holds a niche market position focused on compliance-driven organizations requiring guaranteed confidentiality and integrity for internal and external email communications. Zertificon is best suited for security teams managing GDPR compliance, Microsoft 365 environments, and complex PKI certificate management. While the Z1 family includes adjacent products like Z1 CertServer for certificate automation and Z1 SecureHub for secure file transfer, the core Email Security capability remains the SecureMail Gateway's encryption and signing functions.

OneAuth