Email is where most attacks start. Defend it accordingly.
Filtering that catches what standard protection misses, defenses built specifically for impersonation and payment fraud, and training that helps your team recognize the messages designed to get past everything else.
The most expensive email attacks contain no malware at all.
Business email compromise works by impersonation. A message that appears to come from an executive, a vendor or a customer asks someone to change payment details or move funds. There is no attachment to scan and no link to block.
These attacks succeed because they exploit normal business process and a plausible sense of urgency — which is why technical filtering alone is not sufficient.
How email gets defended
Which of these are available depends on the service deployed and the email platform you use. We confirm what applies to your environment before recommending anything.
Advanced filtering
Phishing, malware and spam filtering layered on top of what Microsoft 365 provides, catching a meaningful volume of what native filtering lets through. No filter catches everything, which is why the other layers exist.
Link and attachment analysis
Depending on the service, links and attachments can be examined at delivery and again at click time — since attackers routinely weaponize a URL only after the message has passed inspection.
Impersonation protection
Detection for lookalike domains, spoofed display names and unusual sender behavior — the mechanics behind business email compromise.
One-click reporting
A reporting button in the mail client so suspicious messages come to us instead of being forwarded around the office.
Mailbox-wide remediation
Where the deployed service supports it, a message confirmed as malicious can be pulled from the mailboxes that received it rather than chased one at a time.
Awareness training
Ongoing training and realistic phishing simulations that build judgment over time, with results used to guide coaching rather than to embarrass people.
Process beats detection for payment fraud
The single most effective control against wire and invoice fraud is not technical. It is a rule that any change to payment details is verified by phone, using a number you already had, before anything moves.
We help put controls like that in place alongside the technical defenses, because the attacks that cost the most are the ones designed to look completely legitimate.
Authentication that makes you harder to impersonate
SPF, DKIM and DMARC are the records that let other organizations verify mail genuinely came from your domain. Configured correctly, they make impersonating your business substantially harder — and they improve your legitimate mail's deliverability at the same time.
They are also commonly misconfigured, or configured in a permissive mode that does nothing.
Layers, because none of them is complete on its own
Filtering reduces what reaches people. Training improves the judgment applied to what still gets through. Neither removes the risk entirely, and treating either as a solved problem is how organizations get caught.
That is why email defense is built in layers and reviewed over time, and why it connects to the wider security picture rather than sitting on its own.
What clients say about working with Intech
“Everyone at Intech has always been responsive and helpful each and every time we call for help.”
Independent ElevatorGoogle review from Independent Elevator (opens in a new tab) “The team at Intech are professional, highly responsive to your needs and take quick action to resolve the issue.”
Mann MarketingGoogle review from Mann Marketing (opens in a new tab) “Our office has used Intech for more than 10 years… The service is excellent.”
Jim T.Google review from Jim T. (opens in a new tab)
Common questions
Isn't Microsoft 365 filtering enough?
It is a reasonable baseline that stops a great deal. Targeted phishing and impersonation are exactly the categories it is weakest against, which is why an additional layer is worthwhile for most organizations.
Which email platforms do you protect?
Business email on Microsoft 365 and Exchange. We do not filter consumer accounts such as personal Gmail or Yahoo.
Do phishing simulations embarrass employees?
Not the way we run them. Results are used to identify where coaching helps, not to single people out. Programs that shame people produce staff who hide mistakes, which is the opposite of what you want.
What happens when someone clicks a phishing link?
It triggers investigation: we work out what was accessed, secure the account, remove the message from other mailboxes where the deployed service allows it, and check for onward activity. Reporting quickly makes an enormous difference, which is why the reporting button matters more than it looks.
Find out what is reaching your inboxes.
A technology review includes a look at your current email defenses and domain authentication.