Ironscales

Ironscales IRONSCALES is the leader in AI-powered email security protecting over 17,000 global organizations. IRONSCALES is headquartered in Atlanta, Georgia.

IRONSCALES is the leader in AI-powered email security protecting over 15,000 global organizations from advanced phishing threats. As the pioneer of adaptive AI, we detect and remediate attacks like business email compromise (BEC), account takeovers (ATO), and zero-days that other solutions miss. By combining the power of AI and continuous human insights, we safeguard inboxes, unburden IT teams, and turn employees into a vital part of cyber defense across enterprises and managed service providers. To learn more, visit
www.ironscales.com
or follow us on X

10/16/2026

An Automatic reply to a message you never sent is not backscatter, it is the lure. This one came from a throwaway M365 tenant's own mailbox rules, so SPF, DKIM and DMARC all passed.

(Link to full teardown in comments)

Attackers are using AI to write better emails and send a lot more of them. So how do organizations best prepare for thes...
10/15/2026

Attackers are using AI to write better emails and send a lot more of them. So how do organizations best prepare for these new attacks?

We asked Forrester Principal Analyst Jess Burn, and she and Audian Paxson, Principal Technical Strategist at IRONSCALES, got into it on our webinar. It’s now available on demand.

▸ How AI is changing the way email attacks get written and scaled
▸ What that shifts for the teams defending the inbox
▸ Where email defense needs to go from here

The Threat Curve Reset: How AI Is Rewriting Email Attacks and the Defense

Link to watch is in the comments.

10/15/2026

The cheapest BEC control available: decide which channels each team uses, then say it out loud. Forrester's Jess Burn explains.

(Link to the full session in the comments)

10/15/2026

A genuine Trello invite to a bank passed SPF, DKIM and DMARC, and the attacker wrote nearly its whole subject line through a CEO display name and a compliance-themed board name. Trello then printed the one field the attacker could not write: an anonymous Proton Mail inviter address.

(Link to full teardown in comments)

10/14/2026

Security AI went from explaining alerts to taking action. Forrester's Jess Burn on what buyers should demand now.

(Link to the full session in the comments)

10/14/2026

A Microsoft sign-in link's only readable destination pointed at the victim's own company, in a parameter Microsoft does not use. redirect_uri and response_type were missing, so the real hand-off lived in the app registration. Judge the client_id, not the signpost.

(Link to full teardown in comments)

10/13/2026

Cutting security hires to fund AI looks cheap on a spreadsheet. Forrester's Jess Burn walks through the real bill.

(Link to the full session in the comments)

10/13/2026

A fake 1Password alert told the reader to ignore it, then hid its only link behind an optional "confirm the details" step. It passed SPF, DKIM and DMARC and the URL scanned clean; a display-name flag and the user's report stopped it.

(Link to full teardown in comments)

Every MSP knows the email queue. User-reported messages to triage. Suspicious emails to investigate. Remediation to run ...
10/12/2026

Every MSP knows the email queue. User-reported messages to triage. Suspicious emails to investigate. Remediation to run by hand across every client tenant.

Today we announced an OEM integration with Todyl that builds IRONSCALES email security straight into the Todyl Security Platform.

▸ Adaptive AI baselines every mailbox and catches BEC, phishing, credential theft, and account takeover
▸ Detection trained by 3,500+ MSPs, so every partner benefits from what the community sees
▸ Automated remediation cuts incident handling from 30 minutes to 30 seconds
▸ Email incident management service available for partners who want experts on investigation and tuning
▸ Email signals show up next to network, endpoint, and identity in one Todyl console

As our CEO and founder Eyal Benishti put it, “MSPs are the security department for the businesses they serve, and their time is the scarcest resource they have.”

Coming to Todyl partners in Q4 2026.

10/12/2026

Five lines of plain text, one bare URL, zero anchor text - so every link-text-vs-destination check had one string, not two. SPF/DKIM/DMARC all passed.

Quarantined after a human verdict.

(Link to full teardown in comments)

Address

6 Concourse Pkwy NE
Sandy Springs, GA
30328

Website

Alerts

Be the first to know and let us send you an email when Ironscales posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Ironscales:

Shortcuts

Share

Category