Enterprise Email Security, Small Business Price

Business email compromise is not just an enterprise problem. According to the FBI's IC3 report, BEC attacks caused over $2.9 billion in reported losses in 2023 — and small businesses were disproportionately affected. Attackers know that small businesses typically lack dedicated security staff, use basic email configurations, and rely on their email provider's default security settings. This makes them easier targets than large enterprises with layered security stacks.

The attack pattern is straightforward: an attacker compromises a single email account through credential phishing, then installs a hidden forwarding rule to monitor all incoming email. They watch for financial transactions — invoices, wire transfers, real estate closings — and insert themselves at the right moment to redirect payments. For a small business, a single successful BEC attack can mean $50,000 to $500,000 in losses, which can be existential.

Most small businesses discover the compromise only after the money is gone. Without proactive monitoring of email forwarding rules, there's no way to detect the attacker's persistence mechanism. The password gets reset, everyone thinks the incident is resolved, but the forwarding rule continues to copy email to the attacker's mailbox silently in the background.

Getting started with MailBreach takes three steps. First, create an account and select your plan. Second, connect your Microsoft 365 or Google Workspace tenant using OAuth — MailBreach requests read-only permissions to scan mailbox rules and forwarding configurations. Third, review your initial scan results and configure your domain allowlist to whitelist any legitimate external forwarding.

The initial scan typically completes within 30 minutes for tenants with up to 100 mailboxes, and within a few hours for larger tenants. After the initial scan, MailBreach runs on a configurable schedule (daily by default) to detect any new forwarding rules that appear. You'll receive email alerts for high-severity findings, so you don't need to check the dashboard constantly.

MailBreach stores only email configuration metadata — never email content. It records which rules exist, what conditions they match, and where they forward email, but it never reads, stores, or processes the actual content of any email message. This makes it safe for regulated industries and simplifies your data handling obligations.