Ironscales
AI email security that stops attacks before they reach your people.
By Ironscales · HQ Atlanta, US · 4.5/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Organizations on Microsoft 365 or Google Workspace that need post-delivery phishing, BEC and account-takeover defense alongside an existing gateway
- Lean IT and security teams that want agentic AI to auto-remediate reported threats without adding analyst headcount
- Managed service providers needing multi-tenant administration, per-client policies and consolidated reporting from one console
- Security teams facing AI-generated phishing, QR-code lures and deepfake impersonation in Microsoft Teams meetings
- Buyers who value fast, low-friction deployment with no MX or DNS changes
Ideal size: 50–10,000 employees people · Cloud-first organization on Microsoft 365 or Google Workspace with a lean security team
Not for
- Organizations running on-premises or non-Microsoft, non-Google mail platforms; compatibility must be confirmed with the vendor
- Teams shopping for a perimeter secure email gateway with MX-level filtering, since Ironscales is designed to sit behind or beside one
- Buyers who need published list pricing before shortlisting, as all plans are quote-based
Value metrics scorecard
Time-to-Value
Deploys in minutes (no MX changes)
~1 days to first production value
Total Cost of Ownership
On request
Quote-based per-seat subscription with annual (discounted) or monthly billing; separate business and MSP plan families
Implementation Friction
1/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
No published seat tiers; pricing and volume terms are quoted per organization and per MSP
Add-on costs
- Email Encryption
- Email Encryption + Data Loss Prevention (DLP)
- DMARC management and monitoring (hosted SPF, DKIM, DMARC)
- Account Takeover (ATO) protection
- Deepfake meeting protection for Microsoft Teams
- Microsoft Teams protection
- Email Incident Management Service (EIMS)
- Human Risk Management bundle: phishing simulation, security awareness training, autonomous campaigns, Themis Copilot, SAT content pack
Company & support
Who is behind Ironscales, and how your team gets help once it is live.
Company
- Founded
- 2014 · 12 yrs in business
- Headquarters
- Atlanta, US
How you get support
- PhoneAll plans
- EmailAll plans
- Live chatNot listed
- Support portal / ticketsAll plans
- Community forumNot listed
- Help centre / docsAll plans
- Dedicated account managerNot listed
- In person / on-siteNot listed
- Hours
- Business hours
- Response time
- Not stated
Support is free of charge, including installs and updates. Phone coverage runs Mon–Fri 6am–9pm UTC (2am–5pm ET); customers can also email [email protected], submit a ticket in the dashboard, or use the support library of videos, articles and how-to guides.
“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.
Market position
Where Ironscales sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.
Companies on the chart 6 / 10
- Ironscales
- Barracuda
- Nightfall AI
- Adaptive Security
- Dashlane
- Intruder
Add or change companies
Up to 10 companies including Ironscales. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What Ironscales ships in AI, and what it asks of your ecosystem.
AI features shipped
Sources describe Themis, an agentic AI virtual SOC that classifies, clusters and remediates threats; three agents (Red Teaming, Phishing SOC, Phishing Simulation); Adaptive AI behavior baselines using NLP/NLU; continuous mailbox behavioral analysis for anomaly detection; and Themis Copilot for Outlook as a Gen AI assistant built on the vendor's PhishLLM.
Your data & models
- Trains on your data
- Not recorded — ask the vendor
- Runs on
- Anthropic
- AI pricing
- Not recorded
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Not recorded
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
Ironscales is an AI email security platform that combines Adaptive AI, agentic automation and a crowdsourced network of 36,000+ security professionals to stop phishing, BEC, account takeover and deepfake attacks inside Microsoft 365 and Google Workspace mailboxes. It deploys in minutes with no MX changes and augments rather than replaces an existing gateway. Three AI agents anticipate attacks, run L2 investigations and train employees, and MSPs get multi-tenant management. Pricing is quote-based.
Frequently asked questions
How long does Ironscales take to deploy, and does it disrupt our mail flow?
Ironscales integrates through a native API with Microsoft 365 and Google Workspace in a three-click setup. The vendor states deployment takes minutes and requires no MX or DNS record changes and no endpoint agents, so it runs alongside the gateway you already have. Customers quoted on the site describe the Office 365 integration as configured in minutes with value starting right away.
Does Ironscales replace our secure email gateway or Microsoft 365 email security?
The vendor positions the product as an augmentation layer, not a gateway replacement. Native email security handles commodity spam and known threats at the perimeter; Ironscales works inside the mailbox to catch targeted attacks that arrive after delivery, including BEC, account takeover, deepfakes and QR-code lures. It can also run standalone if you later retire your gateway.
How is Ironscales priced?
No list prices are published. Ironscales sells through quotes across separate business and MSP plan families, with annual billing at a discount versus month-to-month, which can be cancelled at the next billing cycle. Several capabilities are sold as add-ons, including email encryption and DLP, DMARC management, account-takeover protection, Teams and deepfake protection, EIMS, and the Human Risk Management bundle. A free trial is offered for evaluation.
What support is included with a subscription?
Support is free of charge, including installs and updates, and the vendor states that all plans include full customer support. Channels include extended phone support Monday to Friday, email via [email protected], a ticket form in the dashboard and customer portal, and a support library of videos, articles and installation guides.
Which systems does Ironscales integrate with?
Beyond native Microsoft 365 and Google Workspace integration, the published integrations directory lists SIEM and SOAR tools such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Sumo Logic, Cortex XSOAR and ReliaQuest GreyMatter; identity providers including Okta, Microsoft Entra ID and Ping Identity; Slack; and threat-intelligence services such as VirusTotal, BitDefender, Google Web Risk and WildFire, plus an open REST API.
Is Ironscales a good fit for managed service providers?
Yes. The pricing page describes a dedicated MSP plan family, and the platform provides multi-tenant administration, per-tenant policies and consolidated reporting across clients from one console. Email Incident Management Service is available so Ironscales experts can handle investigation, remediation and AI tuning on the MSP's behalf.