Back to the registry
Agent passport

IRONSCALES

IronScales · Cybersecurity & IT

SaaSNo attestation published

Certification per Microsoft Marketplace.

email securityphishing protectionawareness and training
Provenance reach3 of 12 layers traced

Evidence tier Source Confirmed · 9 captures on record

User ratingNot rated0 reviews on the listing
Runs onSaaSSaaS
ProvenanceUnknown33% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on Microsoft Marketplace.

IRONSCALES Email Protect

IRONSCALES provides AI-powered, human-verified email security that stops advanced threats others miss, like BEC, VIP impersonation, ATO, and social engineering attacks. Trusted by over 17,000 global customers, our native Microsoft Graph API integration delivers real-time, inbox-level defense without disrupting mail flow or requiring MX changes.

Show the rest of the publisher’s description (26 more lines)

Key Benefits

Seamless Microsoft 365 Integration

  • Native API deployment with no MX record changes or mail disruption
  • Supports Microsoft’s built-in “Report Phishing” button and enhances it with deeper remediation workflows
  • Deploys in minutes and integrates with Microsoft Defender, Sentinel, Teams, and other Microsoft tools

Better Protection at the Inbox

  • Stops BEC, ATO, VIP impersonation, and zero-day phishing attacks
  • Provides mailbox-level scanning for time-delayed or post-delivery threats
  • Learns each user’s behavior to catch subtle anomalies that SEGs and static filters miss

Smart Automation That Saves Time

  • Adaptive AI remediates 99.7% of threats without human involvement
  • Clusters and removes similar emails across your tenant with one click
  • Admin-configurable policies let you fine-tune automation without giving up control

Train & Empower Users

  • Phishing simulation testing and security awareness training built into the same platform
  • Auto-targeted training based on real inbox threats and past user behavior
  • In-the-moment coaching via dynamic banners and a GPT-powered Outlook assistant

How It Works

IRONSCALES connects to Microsoft 365 via API in just a few clicks, no MX record changes, no downtime, no disruption. From the moment it’s integrated, our Adaptive AI automatically starts learning your organization’s communication patterns to detect anomalies at the inbox level, where traditional filters miss.

Protection - Every new email is scanned in milliseconds. If it’s malicious, IRONSCALES automatically remediates it and clusters and removes similar emails across all inboxes (even if they have different subject lines, sender name, body). If confidence is low, the system flags it with a warning banner, or routes it for review by your team, or ours.

Report Phishing - User-reported emails (via Microsoft’s native button or our enhanced version) trigger the same detection and remediation workflows. These reports, along with feedback from your security team and our 31,000+ member community, continuously retrain our models to stay ahead of new threats.

Training - Phishing simulations and security awareness training are also built in. Training is driven by real threat data and personalized by user behavior. Every alert, banner, and simulation becomes an opportunity to build smarter users—and a stronger security culture.

Core Capabilities

API-based M365 integration with no MX changes. Mailbox-level detection of BEC, ATO, and time-delayed threats. Adaptive AI with human feedback. Automated remediation across inboxes. Built-in phishing simulations and security awareness training.

Who It's For

IRONSCALES is built for Microsoft 365 security and IT teams who want stronger email protection without complexity. Whether you use Microsoft Defender, a SEG, or nothing at all, we deploy fast and close detection gaps instantly—without disrupting mail flow. Ideal for mid-sized to large organizations, especially those looking to maximize Microsoft investments and apply MACC funds toward a proven, integrated email security solution.

Preview

5 images
IRONSCALES preview 1IRONSCALES preview 2IRONSCALES preview 3IRONSCALES preview 4IRONSCALES preview 5

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Compliance

Government
  • FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27

Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.

Vendor

External enrichment

CompanyIRONSCALESAutomated

Sources

Marketplace listingmarketplace.microsoft.comSource
Privacy PolicyPrivacy PolicySource
License TermsLicense TermsSource

Publisher resources

8 links
Supportironscales.comSource
IRONSCALES + Microsoft: Automated Email Securitycatalogartifact.azureedge.netSource
How IRONSCALES is Differentcatalogartifact.azureedge.netSource
Solution Overview: Ironscales Email Protectcatalogartifact.azureedge.netSource
Request Demoironscales.comSource
IRONSCALES Plansironscales.comSource
About IRONSCALESironscales.comSource
IRONSCALES - Stronger Togetherwww.youtube.comSource

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Unknown
Not stated
Delivery
SaaS
https://ironscales.com/support/
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.