Managed Protect
Email and collaboration security
If a fake invoice or a convincing login page reaches your finance team, the built-in filters have already missed it. We add a layer that catches what they don't.
- Platforms
- M365 · GoogleMicrosoft 365 and Google Workspace
- Deployment
- APIno MX record changes for most set-ups
- Coverage
- Email + appsTeams, SharePoint, OneDrive, Slack
- Reporting
- Monthlythreats stopped and what to change
01 / The problem
The inbox is where most attacks start.
Phishing gets cleverer
Lookalike domains and well-written lures get past default filters. One click on a fake login page hands over an account.
Fake invoices cost real money
Business email compromise (BEC) needs no malware. A spoofed supplier asks for new bank details, and someone pays.
Attacks move into Teams and SharePoint
Once an account is taken over, attackers share files and send messages from inside. Email filters never see it.
02 / What’s included
One layer across mail, chat and files.
Advanced email filtering
Catches phishing, impersonation and malicious links that get past Microsoft Defender and Google's own filters.
Impersonation and BEC checks
Flags lookalike domains, spoofed executives and odd payment requests before they reach finance.
Collaboration app security
Scans files and links shared in Teams, SharePoint, OneDrive and Slack.
Account takeover detection
Spots unusual sign-ins, mailbox rules and data access that suggest an account is compromised.
Data loss prevention
Stops sensitive data leaving by email or file share, using policies we set with you.
Monthly reporting
Threats stopped, risky users and the changes we recommend, in plain English.
[Placeholder: offer for this service, written by ITB]
03 / How it works
Connected first, then tuned to you.
- Review We look at your current email and collaboration set-up and the gaps in it.
- Connect Most tools connect to Microsoft 365 or Google Workspace by API, with no change to mail flow.
- Tune We set policies for your business and cut false positives so real mail gets through.
- Manage We handle quarantine, policy changes and threats, and report monthly.
The built-in filters are a good start. They are not the finish line.
How ITB runs email security
04 / Why ITB
Add to Microsoft, don't replace it.
We keep your Microsoft 365 or Google Workspace and add the layer that catches what it misses. Then we run it for you.
| What it takes | Do it yourself | With ITB |
|---|---|---|
| Choosing a tool | Trials, vendor demos, guesswork | We pick from tools we already run |
| Quarantine and releases | Someone on your team, every day | Handled by us |
| Policy tuning | Trial and error | Set and tuned with you |
| Account takeover response | Spot it, then work out what to do | We act and tell you |
| Reporting | Pulled from several consoles | One monthly report |
· 05 / Questions
Email security, plainly answered.
Q01 We have Microsoft Defender for Office 365. Do we still need this?
Defender is a good baseline. A dedicated layer adds detection aimed at phishing, impersonation and BEC, and a team to manage it. We work alongside Defender, not instead of it.
Q02 Will it disrupt our email?
Usually not. Most of the tools we use connect by API to Microsoft 365 or Google Workspace. That means no MX record changes and no break in mail flow.
Q03 Does it cover Teams and SharePoint?
Yes. We scan files and links in Teams, SharePoint, OneDrive and Slack, and watch for signs of account takeover.
Q04 What about other cloud apps?
CASB (cloud access security broker) tools can show which other SaaS apps your people use and control them. That sits with our SWG / SSE / ZTNA service.
Q05 Who deals with quarantined mail?
We do, unless you'd rather keep it. Users can request a release, and we check it before it's let through.
Related services
User Awareness & Phishing
Trains people for the email that still gets through.
See the serviceSWG / SSE / ZTNA
Web filtering, CASB and safe access to apps.
See the serviceManaged SIEM / SOC
Watches email and identity alerts around the clock.
See the serviceEDR / XDR / MDR
Stops the payload if a malicious attachment is opened.
See the service· [Placeholder]
[Placeholder] [Placeholder]
[Placeholder: written by ITB]