EMAIL GUARDIAN™ · MULTI-LAYERED SECURITY FROM THE CLOUD

Avoid the dangerous domino effect

Email Guardian protects companies from email threats to prevent cybercriminals from using it as a gateway.

0detection and blocking
< 4 saverage delay per email
0service interruptions in 12 years
3 DCsTier III++ in Spain, no third-party clouds

DIAGRAM · THE JOURNEY OF AN EMAIL

bidirectional SMTP relay · inbound and outbound
Internetlegitimate senders
and attackers
EMAIL GUARDIAN · 3 TIER III++ DATA CENTRES IN SPAIN
01IP & domain reputation
02SPF · DKIM · DMARC
03Content & AI
04Attachments & multi-AV
05Sandbox < 3 s
06Anti-fraud & DLP
Your mail serverM365, Workspace,
Dovecot, Cyrus…
DELIVEREDQUARANTINEBLOCKED + ALERTAES256 ENCRYPTED COPY · 5 DAYS (SPOOLING)

MULTI-LAYERED FILTERING · TEN ENGINES IN SERIES

Thousands of elements examined in every message

Email Guardian uses detection and filtering technology developed entirely by Iberlayer, which examines thousands of elements in every message to determine its security. Our technology guarantees 99.99% detection and blocking of spam and malicious email.

Each layer discards the obvious and refines the doubtful. What reaches the last layer is what no antivirus knows yet.

L1
IP and domain reputationWhere are they? Who uses them? For what and how?
L2
SPF, DKIM, ARC and DMARC authenticationDetects domain spoofing at the source
L3
Domain monitoringTyposquatting, lookalike or newly registered domains
L4
Context, text and grammar with AIWritten by a person, an app or an AI engine? For what purpose?
L5
URLs, images and QR codesLink analysis and rewriting with post-click protection
L6
Attachments · multi-engine antivirusSeveral engines in parallel, even with encrypted files
L7
Real-time sandboxDetonation in under 3 s: zero-day and ransomware
L8
Virtual patchesBlocks exploits against unpatched phones and computers
L9
Anti-fraud: CEO, BEC, payroll, account changesBank certificates, tampered PDFs, fake senders
L10
DLP · data leakageSensitive data in outgoing email and attachments
DeliveredQuarantineBlocked

TRUST IN EACH ATTACHMENT

File analysis, even when encrypted

Email Guardian analyses attachments in depth and is capable of analysing even encrypted files, extracting data, metadata, QR codes, URLs, cryptocurrency wallets, etc. It includes multi-engine AV and real-time sandboxing, which blocks and prevents attacks early, including zero-day attacks and ransomware.

IN
Attachment received

PDF, Office, ZIP, image… even password protected.

STEP 1
Decryption and extraction

Texts, metadata, QR, URLs, wallets.

STEP 2
Multi-engine antivirus

Several engines in parallel.

STEP 3
Sandbox < 3 s

Detonation for the unknown.

OUT
Verdict + MITRE

Deliver, quarantine or block.

Extracts data, metadata, QR codes, URLs and crypto wallets
Decrypts password-protected files before analysing them
Detonates in a sandbox anything the AVs don't recognise
Traces every threat to its MITRE ATT&CK vector ID

FRAUD PROTECTION

Fraud detection before it costs money

Email Guardian recognises document manipulation, false return addresses and spoofing used in social engineering attacks such as CEO fraud or payroll fraud.

It protects against bank fraud by monitoring conversations about collections and payments, analysing the validity of alleged bank certificates and detecting suspicious requests to change account numbers.

  • CEO and payroll fraud
  • Banking fraud and bank account changes
  • PDF manipulation and SIM cloning
  • Immediate phone alert in urgent cases

DIAGRAM · ANATOMY OF A CEO FRAUD

ATTACKERceo@company-inc.comlookalike domain · typosquatting · newly registered
Email Guardiandetects · blocks · calls
TARGETFinance dept."Urgent: change the account for this payment"
SIGNALDomain one character off the real one
SIGNALRegistered 3 days ago
SIGNALUrgent payment to a new account
SIGNALSender who never wrote to finance

ARCHITECTURE AND INTEGRATIONS

100% European cloud, connected to your ecosystem

No hardware or software. Operational in minutes, scalable to the largest organisations and with a written availability SLA.

MAIL PLATFORMS

Microsoft 365
Google Workspace
Dovecot
Cyrus

Identification and remediation API: removes malicious content already delivered.

Email Guardian
DC 1TIER III++
DC 2TIER III++
DC 3TIER III++
SPAIN · NO THIRD-PARTY CLOUDS
GDPR · ISO 27001 · ENS HIGH

YOUR SECURITY TEAM

Web console2FA · 1 year of logs · tenth-of-a-second search
SOCreal-time encrypted logs + MFA control API
EDRCrowdStrike, Palo Alto, SentinelOne · IOC exchange
Alertsperiodic reports · phone call if serious
Domain monitoring

DOMAIN SECURITY

Domain monitoring

Cybercriminals use malicious and suspiciously similar domains to carry out a wide range of attacks. Registering a domain is easy, so almost anyone can set up a fraudulent website to steal credentials, spoof identities or divert traffic.

Domain monitoring detects and identifies cyberattacks based on newly generated, malicious, impersonated or fraudulent domains.

URL analysis

SECURITY IN EVERY CLICK

URL analysis and continuity

URL rewriting with real-time post-click protection: the link is re-analysed at the moment the user clicks it.

Email Guardian also includes a temporary mail spooling service, keeping an AES256-encrypted copy of all messages for up to 5 days, guaranteeing their restoration in the event of failures in the customer's infrastructure.

Scalability

SCALABILITY

Cloud service

Email Guardian is a cloud service that requires no installation, maintenance or software or hardware updates. We guarantee service availability and performance in writing (SLA).

Easily scalable to serve the largest organisations: it adapts quickly to traffic peaks or a significant increase in the number of users.

ALL FEATURES

The most complete and simple email protection on the market

Reputation analysis

Control of each and every IP and domain: where are they? who uses them? for what and how?

Context analysis

Why this email and for what purpose? What is it about and how? Is it written and sent by a person, an app, an AI engine?

Attachment analysis

Multiple antivirus engines to detect all types of malware, even in encrypted attachments.

Real-time sandbox

Sandbox (< 3 s) for all possible threats not detected by AVs and zero-day threats.

Anti-fraud protection

CEO, payroll and banking fraud: PDF manipulation, account changes, SIM cloning.

Anti-phishing protection

Advanced protection against phishing and identity theft. SPF, DKIM and DMARC control.

Link analysis

Structure analysis, URL tracking, vulnerability detection and remote risk levels.

Image analysis

Analysis of texts, metadata and characteristics. Complete QR and barcode parsing.

AI applied to security

Powerful autonomous AI engine for analysis of user behaviour, texts and grammar.

Virtual patches

Prevents the exploitation of vulnerabilities in outdated smartphones and desktop computers.

DLP

Helps prevent and mitigate data leakage through email and attachments.

Web console

Real-time web console with 2FA and 1 year of logs, searchable in tenths of a second.

URL rewriting

Real-time post-click protection.

Identification and remediation

API integration with M365, Google Workspace, Dovecot and Cyrus to identify and remove malicious content.

MITRE traceability

Identifies and displays the vector IDs associated with each detected threat.

EDR integration

Native integration with CrowdStrike, Palo Alto and SentinelOne for IOC exchange.

Cloud service

100% European cloud. No hardware or software required. Easy to set up. Operational in minutes.

Maximum performance

Average delay injected into emails of less than 4 seconds. Zero service interruptions in 12 years.

Very low ROI

Single licence type with everything included from the start, based on number of users and at a very competitive price.

24/7 support

Single-level technical support, served by Iberlayer technicians 24 hours a day, 7 days a week, in English and Spanish.

HOW DOES IT WORK?

As simple as adjusting your company's MX records

The whole process only takes a few minutes and is coordinated between Iberlayer and the customer.

1Customer registration

Once registration is completed, the customer's domains are already accepted by Email Guardian.

2MX change

Coordinated between Iberlayer and the customer. A few minutes.

3Protected!

Protected and safe customer. Nothing to install.

BEFORE · DNSyourcompany.com. MX 10 mail.yourcompany.com.
→ direct attacks on your server
AFTER · DNSyourcompany.com. MX 10 mx1.emailguardian.
yourcompany.com. MX 20 mx2.emailguardian.
→ all email goes through Email Guardian

SEE IT IN ACTION

It only takes one click on a malicious email to put your entire organization at risk

Request a real test

Start protecting your email today. Fill out the form and our experts will arrange a free demo session for you.

  • Stop email attacks in real time
  • Easily identify the most threatened user accounts
  • Automatically stop data leaks and security threats
* Required fields