One address takes the orders, the invoices, the changes of bank detail, and the delivery queries. Whoever holds it inherits every relationship hanging off it, speaking in a voice your suppliers and customers already trust. Both cards on this board work from inside the tenant.
Ironscales provides mailbox-level API protection. It is explicitly not a gateway, and that difference decides what it is able to see at all. Something bolted to the front of a tenant checks mail as it arrives and then loses sight of it. A connection made over an API stays in the box and carries on reading, which is why a message that turned nasty after delivery can be withdrawn, and why an internal account quietly mailing rubbish to your customers gets noticed.
It picks up the house style as well. Which addresses normally send invoices, which suppliers are unremarkable, how a real internal request reads. A forgery aimed at a shop nearly always copies a genuine thread, so whatever spots it has to be whatever read the genuine thread.
Simulation earns a bad name because it usually gets run once a year to satisfy a form. Done properly it is drill, aimed at the four or five people who approve payments and answer customers, with brief material handed to whoever actually needs it in place of a company wide video that nobody watched.
The drill card sells separately because plenty of businesses are content with the mail cover they have and want only the practice. Nothing obliges you to take the pair.
Rates below are weighed straight off the billing scales the moment this page opens. Lift anything down and it waits in the basket until you are ready.
Mailbox-level API protection for the address your suppliers write to. Ironscales is not a gateway. It reaches into the tenant through an API and reads mail that already arrived, and there is nowhere else from which a hijacked account gives itself away.
| Trades on | Ironscales, reaching Microsoft 365 or Google Workspace through an API |
|---|---|
| Guards | Mailboxes taking orders, invoices, and altered bank details |
| Banked for | Detections and reporting, held inside the Ironscales tenant |
| Settled by | Automatic clean up, checked over by Fortify 24x7 engineers |
| Weighed by | Mailbox, charged monthly |
The practice half bought on its own, for a business already content with its mail cover but short of rehearsal at spotting a purchase order that never came from a real supplier.
| Trades on | Ironscales awareness and simulation |
|---|---|
| Guards | Whoever approves payments and answers your customers |
| Banked for | Per person results and campaign history, in the reporting console |
| Settled by | Fortify 24x7 engineers keeping the campaign calendar |
| Weighed by | User, charged monthly |
More trouble arrives by mail than by any other route into a trading business. That does not make it the only route, and these two cards have edges worth reading first.
Heads up: card statements show FORTIFY 24X7 - CommerceGuard Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.