Ironscales reaches into a Microsoft 365 or Google Workspace tenant across the provider API, working from within the mailbox itself. Your MX records do not move, mail flow is not rerouted through anybody, and the deployment does not require a change window with your mail team. Two published rates: protection with training folded in, or training standing by itself.
Three things worth understanding about this program before you price it, written for somebody who will be asked to defend the decision internally.
A gateway makes one judgment as the message passes and then has no further say. Working at the mailbox means a message can be reassessed after delivery, which is how a link that was harmless on Tuesday and weaponized on Thursday still gets removed from the inbox it is sitting in.
A message somebody flags goes to triage, and once it is confirmed hostile it is stripped from every inbox it arrived in, and not merely from the one belonging to whoever spoke up. The person who reported it hears back, which is the feedback that keeps people reporting.
Simulation results are tracked per person, not averaged into a departmental score that conceals the three people who need help. Follow-up modules are assigned automatically, and the reporting is specific enough to be useful to a manager rather than only to a board slide.
Each control is priced against its own unit and can be bought without the others. Rates come live from the billing catalog. Anything added here is held in the schedule and checked out from the rate schedule.
Mailbox-level defense with the training program bundled in. Operating across the vendor API into Microsoft 365 or Google Workspace, Ironscales inspects mail once delivery has happened. That is what lets it deal with a message which looked clean when it landed and only turned afterwards. Anything confirmed is removed from every inbox it managed to reach.
Simulation and training bought alone, suiting a business that already has mail filtering it has no intention of replacing. Simulated phishing goes out on a schedule, results are tracked per person rather than averaged across a department, and remedial modules are assigned to the people the results actually point at.
Mail is the most common way in, and the most oversold category in this industry. The limits of this program are worth stating precisely.
The strongest argument for this line is architectural: it protects the mailbox without asking you to put anybody new in the path of your mail.
Any program can be bought on its own. Most estates end up running several, and the reason they work well together is that one desk operates all of them.
Heads up: card statements show FORTIFY 24X7 - Enterprise Secure Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.