Engineering capabilities
- MX or connector-based deployment design
- Anti-phishing, impersonation and attachment policy
- Quarantine, release and end-user digest workflow
- Outbound filtering and rate control
Security & DNS
Email Security Gateway
Inbound and outbound mail filtering in front of the tenant: phishing, impersonation, malware and data-loss controls with quarantine and release workflow.
Security & hardening
- URL rewriting and detonation of suspicious attachments
- Alignment with SPF, DKIM and DMARC enforcement
- Administrative roles separated from mailbox access
Mail filtering path
Filtering sits in front of the tenant so malicious mail is stopped before it reaches a mailbox, with a release workflow users can actually use.
-
01
Inbound
Authentication results feed the filtering decision rather than being logged and ignored.
-
02
Inspection
- Anti-phishing
- Impersonation detection
- Attachment detonation
- URL rewriting
Links are checked at click time, not just at delivery time.
-
03
Delivery
- Tenant connector
- Quarantine
- End-user digest
Only mail that survives inspection is handed to Microsoft 365 or Google Workspace.
-
04
Outbound
- Outbound filtering
- Rate limits
- Data-loss rules
A compromised mailbox is contained instead of becoming a spam source that damages the domain.
Frequently asked questions
Do we need a gateway if we already have Microsoft 365?
Not always. Defender for Office 365 covers many organisations well; a gateway is added where impersonation risk is high, where multiple mail platforms exist, or where independent quarantine control is required.
What happens to mail if the gateway is unavailable?
Reputable gateways spool mail during an outage and deliver it once service resumes. That behaviour is verified before MX records are moved.
Can users release their own quarantined mail?
Yes, through a digest and self-service portal, with policy deciding which categories may be released without an administrator.
Scope the work before you commit budget
Send the environment details and get an engineered proposal with assumptions, risks and a rollback path.