Kaseya Inky is an AI-powered anti-phishing and email security platform that uses computer vision, behavioural analysis, and sender authentication to detect phishing, impersonation, business email compromise (BEC), and brand spoofing. It tags every email with a colour-coded banner — green for trusted, yellow for caution, red for danger — empowering users to make informed decisions. Inky is part of the Kaseya 365 platform and integrates natively with M365 and Google Workspace.

Microsoft Defender uses text-based analysis and reputation to detect phishing — it is effective against known threats but struggles with visual impersonation and sophisticated social engineering. Inky uses computer vision to "see" emails the way a human does — analysing logos, layouts, and colours to detect brand impersonation that text-based filters miss. Inky also provides explicit banner warnings on every email, while Defender quietly quarantines. On average, Inky catches 3x more phishing than Defender alone, with a false positive rate under 0.1%. The two are complementary — Inky adds a layer of visual and behavioural analysis that Defender does not provide.

Every email analysed by Inky is tagged with a colour-coded banner at the top of the message. A green banner means the email is from a trusted, authenticated sender. A yellow banner means exercise caution — the sender is external or unverified. A red banner means the email is dangerous — known phishing or impersonation has been detected. A grey banner means the email is from an external sender and should be verified before acting. The banner text explains exactly why the email was flagged, educating users in real time rather than relying on annual training.

Business email compromise is a social engineering attack where an attacker impersonates a trusted figure — a CEO, a supplier, a colleague — to manipulate the recipient into transferring money, sharing sensitive data, or changing payment details. BEC emails do not contain malicious links or attachments — they are text-based social engineering, which is why traditional email filters miss them. Inky uses behavioural analysis to detect the patterns of BEC: sender impersonation, unusual request patterns, reply chain hijacking, and requests for wire transfers or gift cards. BEC is the most financially damaging email threat, costing organisations billions annually.

No — Inky complements Defender. Microsoft provides baseline email security that is effective against many known threats. Inky adds computer vision, behavioural analysis, and explicit user-facing banner warnings that Defender doesn't provide. Most organisations run both — Defender as the baseline and Inky as the advanced anti-phishing layer. Inky processes emails after they pass through Microsoft filtering, adding its own analysis and banner warnings before the email reaches the inbox.

Inky baselines the normal behaviour of each mailbox — typical sending patterns, login locations, and forwarding rules. When an attacker compromises a mailbox, their behaviour deviates from the baseline: they send emails at unusual times, from unusual locations, or create forwarding rules to exfiltrate email. Inky flags these anomalies for investigation. It also monitors for impossible travel — a login from London followed by a login from Tokyo 30 minutes later — and suspicious auto-forwarding rules that compromised accounts typically create.

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that tells receiving mail servers what to do with emails that fail SPF or DKIM authentication checks from your domain. Inky enforces DMARC and provides forensic analysis of authentication failures — showing you exactly which emails are being sent in your name and whether they pass or fail authentication. Many organisations configure DMARC incorrectly or leave it in monitoring-only mode. Inky helps you move to full enforcement, preventing domain spoofing and protecting your brand from phishing campaigns.

QR code phishing, or quishing, embeds a malicious link in a QR code image instead of a clickable URL. Traditional email filters scan text and URLs — they cannot analyse the content of an image to determine if a QR code leads to a phishing page. Inky uses computer vision to detect and analyse QR codes in email images, then follows the link to determine whether it leads to a credential-harvesting page. Quishing attacks have increased significantly as attackers exploit the gap in traditional email filtering.

Inky deployment is typically fast — it is an inline or API-based integration with M365 or Google Workspace, requiring no on-premises hardware. Initial deployment and configuration take 1 to 2 days, including mail flow routing configuration, banner policy setup, and DMARC analysis. The platform begins analysing emails immediately upon deployment. A 1 to 2-week tuning period follows, during which we review false positives and refine banner policies. Full operational protection — with verified detections, user-reported email workflows, and reporting active — is typically achieved within 2 to 3 weeks of contract signature.