The wrong email.
In the right place.

A checkpoint before the inbox. Built to examine sender, content, links, and attachments together—then give the message a clear outcome.

Explore threat coverage

Spam & graymail

Less noise. More of what matters.

Separate unwanted bulk messages from routine correspondence. Organization policies decide how newsletters and graymail should be handled.

Phishing & credential theft

The link is only part of the story.

Examine sign-in requests, urgency, sender context, and suspicious links. A convincing message still deserves scrutiny before someone acts.

Impersonation & invoice fraud

A familiar name can carry an unfamiliar request.

Look for lookalike domains, sender mismatches, payment-detail changes, and executive impersonation. Message context matters even without an attachment.

Malware & attachments

What arrives with the message matters too.

Check attached files and report malicious or unscannable content explicitly. Unsupported or encrypted content must not silently receive a clean verdict.

No single clue
tells every story.

These examples show the intended review experience. They are not live scans or an accuracy claim.

MESSAGE / 001
FROM[email protected]SUBJECTUpdated banking details for your next invoice

Hi team,

Please use the new account details on the attached invoice before processing payment today.

Invoice details.pdf
ILLUSTRATIVE VERDICT
HOLD.

Sender resembles a trusted organization, but the address and payment request need review.

Lookalike addressPayment changeUrgency cue

SAMPLE MESSAGE · NOT A LIVE SCAN

Deliver or tag.

Mail that meets policy can continue to the destination. Tags can give recipients context where appropriate.

Hold for a decision.

Questionable messages belong in quarantine with reasons and permission-controlled review.

Reject or defer.

Reject during intake when policy permits. Temporary problems need an explicit retry outcome, not a clean verdict.