Cloud Email Security

Cloud email security is the protection of business email communications delivered as a cloud-based service, without requiring on-premises hardware or infrastructure. It sits between your email platform and the inbox, scanning inbound and outbound traffic for threats including phishing, malware, spam, and business email compromise before they reach your users. Heimdal’s cloud email security protects organisations running Microsoft 365, Google Workspace, and hybrid environments, with two tiers covering foundational email hygiene through to advanced fraud detection and forensic-level investigation.

Heimdal’s cloud email security covers phishing and spear phishing, ransomware delivered via email, botnet activity, spam, and malware across inbound and outbound traffic. The ATP and Fraud Prevention tier extends this to business email compromise, CEO impersonation, whaling, and invoice modification, attacks that carry no malicious link or attachment and bypass traditional gateway scanning. Suspicious link patterns, clickbait, and language detection are also included as separate capabilities within the ATP tier.

Business email compromise, whaling, and CEO impersonation usually carry no malicious payload. There is nothing for gateway scanning to flag. Heimdal’s Fraud Prevention capability in the ATP tier uses over 125 analysis vectors to identify these attacks, targeting BEC, invoice modification, and CEO impersonation specifically. Suspicious link, clickbait, and language detection operates as a further layer, and full threat visualisation with automated detection and response is included.

The ATP and Fraud Prevention tier includes post-delivery threat alerts and notifications. When a threat is detected in a message already in an inbox, your team receives an alert. For detail on what specifically triggers a post-delivery alert in your environment, contact Heimdal’s team or request a demonstration.

Email Security 365 covers anti-spam, phishing and botnet protection, deep content inspection using phrase, pattern, and Bayesian checks, greylisting and email tagging for unknown senders, SPF/DKIM/DMARC authentication, a secure email gateway with MX record protection, AI-enhanced DNS security (requires the Heimdal DNS Security Module), 99.9% uptime certified hosting, detailed forensics with per-user quarantine reports, and 365-day email backup and archiving.

The ATP and Fraud Prevention tier includes everything above and adds AI-powered outlier detection for BEC, CEO fraud, and phishing; advanced sandboxing with HTML and timing analysis; real-time attachment reformatting checks; post-delivery threat alerts and notifications; fraud prevention using over 125 analysis vectors; forensic-level data logging and investigation tools; suspicious link, clickbait, and language detection; and full threat visualisation with automated detection and response.

Heimdal cloud email security supports Microsoft 365, Google Workspace, and hybrid environments. It operates as a secure email gateway using MX record protection for both inbound and outbound mail, sitting alongside your existing email platform rather than replacing it. AI-enhanced DNS security for threat tracing is available within Email Security 365 but requires the Heimdal DNS Security Module to be active.

Both tiers include detailed forensics with customisable threat analysis and per-user quarantine reports. The ATP and Fraud Prevention tier adds forensic-level data logging and investigation tools, alongside centralised control with automated responses and granular logging.

Heimdal Email Security 365 includes 365-day email backup covering email relay and archiving. The product provides continuous email availability, ensuring archiving, continuity, and retention across that period.