ISO 27001 log retention requirements come down to one rule....
Read MoreMulti-layer email filtering, multi-engine malware scanning, AI phishing detection, BEC protection, email encryption, DLP, continuity, and archiving — one platform that secures your organisation’s email from every angle. Cloud-based, no hardware, deployed in under an hour.
Spam Detection Rate
False Positive Rate
Malware Catch Rate
Email Threat Protection
Four pillars that define comprehensive email protection
Email filtering across connection, envelope, header, content, and image layers — catching spam, malware, phishing, and BEC at different stages of the email lifecycle, before it reaches the inbox.
Machine learning models trained on billions of emails detect new and evolving email threats — zero-day malware, novel phishing campaigns, and sophisticated social engineering that signature-based filters miss.
A secure email gateway that sits between the internet and your mail server — inspecting every email for threats, enforcing policies, and blocking malicious content before it reaches your organisation.
Email continuity ensures users can send and receive email even during an outage. Archiving provides long-term retention, eDiscovery, and compliance — every email stored, searchable, and tamper-proof.
Eight core capabilities — click to expand each
Multi-layer spam filtering that blocks unsolicited bulk email, marketing spam, and nuisance mail — keeping inboxes clean and reducing the risk that users miss important messages buried under spam.
Multi-engine malware scanning that checks every email attachment against multiple antivirus engines — catching known malware, zero-day threats, and malicious files that a single engine would miss.
Detection of phishing emails, credential-harvesting links, and brand impersonation — combining URL reputation, link rewriting, and visual content analysis to catch phishing attacks that evade standard filters.
Behavioural analysis detects BEC, CEO fraud, vendor impersonation, and conversation hijacking — the social engineering attacks that do not contain malware or malicious links and bypass traditional filters.
Email encryption for sensitive communications and data loss prevention (DLP) policies that detect and block the outgoing transmission of sensitive data — credit card numbers, National Insurance numbers, intellectual property, and PII.
Email continuity service ensures users can send and receive email even during a mail server outage — with an emergency inbox that queues and delivers email when your primary mail server is unavailable.
Long-term email archiving with tamper-proof storage, legal hold, and eDiscovery— store every email in a searchable archive that meets compliance retention requirements and supports legal investigation.
Comprehensive analytics and reporting on email security posture — visibility into spam rates, malware detections, phishing attempts, BEC attacks, and DLP policy violations across your organisation over time.
Three deployment options — the right model depends on your requirements
The cloud-based email security gateway. A cloud service that sits between the internet and your mail server — inspecting every email for threats, enforcing policies, and blocking malicious content. No on-premise hardware required. Deployed in minutes via MX record change.
Ideal for: Organisations that want cloud-based email security with no on-premises hardware, fast deployment, and comprehensive threat protection.
The cloud gateway with managed monitoring and response. Our security team monitors email threat alerts, tunes filtering policies, investigates user-reported phishing, and manages DLP policy — the email security tooling with analyst-led operation and response.
Ideal for: Organisations that want email security tooling with analyst-led operation, rather than self-managing the console and policies.
The full email security suite. Cloud gateway with managed monitoring, email archiving with eDiscovery, advanced DLP with custom policies, and integration with the SOC for incident response — the deepest level of email security and compliance.
Ideal for: Larger organisations and regulated industries that need email archiving, eDiscovery, advanced DLP, and compliance reporting alongside threat protection.
Six scenarios where Advanced Email Security protects your organisation
Block unsolicited bulk email, marketing spam, and nuisance mail — keeping inboxes clean and ensuring important messages are not buried under spam.
Detect and block email-borne malware and ransomware — malicious attachments, document macros, and scripts that encrypt files or establish persistence.
Detect phishing emails with credential harvesting links, fake login pages, and brand impersonation — preventing users from entering credentials on malicious sites.
Detect CEO fraud, vendor impersonation, and invoice redirection scams — the social engineering attacks that cost organisations billions and bypass traditional filters.
Prevent the outgoing transmission of sensitive data — credit card numbers, National Insurance numbers, intellectual property, and PII — through email.
Archive every email in a tamper-proof, searchable archive with legal hold and eDiscovery — meeting retention requirements and supporting legal investigation.
Kaseya Advanced Email Security is a comprehensive email security platform that protects your organisation from spam, malware, phishing, business email compromise (BEC), and data loss. It combines multi-layer filtering, multi-engine malware scanning, AI threat detection, email encryption, data loss prevention (DLP), email continuity, and email archiving into a single platform. It sits between the internet and your mail server — inspecting every email for threats and enforcing policies before email reaches your users. It is deployed as a cloud service, requiring no on-premise hardware, and integrates with Microsoft 365 and Google Workspace.
Microsoft Defender for Office 365 provides baseline email security that is effective against many known threats. Kaseya Advanced Email Security adds several layers that Defender does not provide. Multi-engine malware scanning: Defender uses one engine; we scan every attachment against up to 5 engines, catching malware a single engine might miss. Advanced BEC detection: Defender offers basic BEC detection; we use behavioural analysis to detect CEO fraud, vendor impersonation, and conversation hijacking. Email continuity: Defender does not provide an emergency inbox during outages; we do. Email archiving: Defender does not provide tamper-proof archiving with eDiscovery; we do. Advanced DLP: Defender has basic DLP; we provide custom policy content inspection. The two are complementary — many organisations run both, with Advanced Email Security as the advanced layer.
Multi-engine malware scanning checks every email attachment against multiple antivirus engines simultaneously. No single antivirus engine catches 100% of malware — each engine has gaps. By scanning with up to 5 engines, we catch malware that any single engine would miss. If one engine misses a new malware variant, another is likely to catch it. This significantly increases the malware catch rate compared to a single-engine solution. For unknown and suspicious files that no engine flags, we also use sandbox detonation — running the file in an isolated environment to observe its behaviour and determine if it is malicious before delivering it to the user.
Email continuity is a service that ensures your users can continue to send and receive email even when your primary mail server is unavailable. If your mail server goes down — due to hardware failure, maintenance, or a cyberattack — the continuity service provides an emergency inbox that queues incoming email and allows users to send and receive email through a web-based client. When your primary server is restored, the queued email is delivered automatically. This means an email server outage does not become a business outage — your users continue to communicate, and no email is lost. The continuity service has a 99.9% uptime SLA.
Email archiving is the long-term storage of every email your organisation sends and receives, in a tamper-proof, searchable archive. Unlike a backup (which is a copy of your mailbox), an archive is a separate, WORM (write-once-read-many) storage system — once an email is archived, it cannot be modified or deleted, even by an administrator. This is essential for compliance and legal purposes. Many regulations require email to be retained for specific periods (GDPR, HIPAA, PCI DSS, FINRA). If your organisation is involved in litigation, you may need to produce email evidence — eDiscovery allows you to search the archive for relevant emails and export them for legal proceedings. Legal hold ensures that emails related to an active case are preserved even if the retention period would normally expire.
Data loss prevention for email detects and blocks the outgoing transmission of sensitive data through email. DLP policies scan outbound email content for patterns that indicate sensitive data — credit card numbers (using Luhn algorithm validation), National Insurance numbers, email addresses, phone numbers, and custom keywords or regular expressions. If a policy is triggered, the email can be blocked, quarantined for approval, or delivered with a warning. DLP prevents accidental data leaks (an employee emailing a spreadsheet of customer data to a personal account) and malicious data exfiltration (an insider sending intellectual property to a competitor). It is a critical control for GDPR, HIPAA, and PCI DSS compliance.
Business email compromise is a social engineering attack where an attacker impersonates a trusted figure — a CEO, a supplier, a colleague — to manipulate the recipient into transferring money, sharing sensitive data, or changing payment details. BEC emails do not contain malware or malicious links — they are text-based social engineering, which is why traditional email filters miss them. Our BEC protection uses behavioural analysis to detect the patterns of BEC: sender impersonation (the email appears to come from a CEO but the domain is slightly different), unusual request patterns (a request for a wire transfer that does not match normal communication patterns), reply chain hijacking (an attacker inserts themselves into an existing email conversation), and language analysis (urgency, secrecy, and authority cues that indicate social engineering). BEC is the most financially damaging email threat, costing organisations billions annually.
The cloud email security gateway is deployed by changing your domain's MX (mail exchange) records to point to the gateway. When someone sends you an email, their mail server looks up your MX records and delivers the email to our gateway. The gateway inspects the email, filters out threats, and forwards the clean email to your mail server. This takes effect within minutes of the MX record change (though DNS propagation can take up to 24 hours globally). No on-premises hardware is required — the gateway is a cloud service. For organisations with an existing on-premises email infrastructure, the gateway can also be deployed as a virtual appliance or configured as a mail relay. The entire deployment typically takes under 1 hour.
Yes. Kaseya Advanced Email Security supports several compliance frameworks. GDPR: email archiving with defined retention periods, DLP for personal data, and breach notification support. HIPAA: email encryption for PHI transmission, DLP for protected health information, and archiving for audit evidence. PCI DSS: DLP for credit card data detection, email archiving for transaction evidence, and access controls for cardholder data. SOC 2: email security monitoring, access logging, and incident response evidence. The Enterprise tier includes compliance-specific reporting tailored to your framework, with metrics mapped to control objectives. We also provide the email retention and security monitoring evidence that many frameworks require.
ISO 27001 log retention requirements come down to one rule....
Read More
The best ISO 27001 compliance training is the training that...
Read More
The best business continuity planning consultants have delivered your kind...
Read MoreHave questions or need assistance? We’re here to help. Reach out to us anytime, and we’ll respond promptly to your inquiries.
+44 03303031444
