---
title: 'Email security'
url: 'https://triplepoint.org.uk/security/people-and-email/email-security'
markdown: 'https://triplepoint.org.uk/security/people-and-email/email-security.md'
date: '2026-09-28'
description: 'Email security for UK businesses on Microsoft 365 and Google Workspace. Filters phishing, malware, impersonation and spam before it reaches your staff.'
---

# Email security

The riskEmail is how most attacks begin: phishing links, malicious attachments, fake invoices and messages pretending to come from the boss or a supplier.

Microsoft 365 and Google Workspace include filtering, and it catches a lot. Targeted attacks, and invoice fraud in particular, are written specifically to get past it.

 What it does- Blocks spam, phishing, malware and malicious links before they reach mailboxes
- Checks links again at the moment someone clicks, in case a site turns malicious after the email arrived
- Opens suspicious attachments in a sandbox to see what they do, catching threats never seen before
- Spots impersonation and invoice fraud by analysing the wording and context of a message, not just who sent it
- Detects malicious links hidden in QR codes and images
- Pulls back emails from mailboxes if they are found to be malicious after delivery
- Checks outgoing email for sensitive data and can encrypt it automatically

 Who it's forAny business using Microsoft 365 or Google Workspace. It matters most if you pay suppliers or send invoices by email, because that's what invoice fraud targets.

 How we supply itBy default we supply the licence and you (or your IT provider) connect it to your email. If you'd rather hand it over, we can set it up for you at our standard day rate, including the mail routing and a check of your SPF, DKIM and DMARC records.

 What's under the hood**Sophos Email** — managed from Sophos Fusion. It connects directly to Microsoft 365 or sits in front of your email as a gateway, and it links up with our phishing simulation and training.

 Questions We use Microsoft 365. Isn't that enough?+Microsoft's built-in filtering catches a lot, and for some businesses it's enough. Dedicated email security adds deeper checks, such as attachment sandboxing, checking links when they're clicked and impersonation detection, which is where targeted attacks tend to get through.

 Will we lose genuine emails?+Anything held back goes to a quarantine that staff can check and release themselves, so a genuine email caught by mistake isn't lost.

 Does it work with Google Workspace?+Yes, it works with both Microsoft 365 and Google Workspace.

 Is this the same as phishing simulation?+No, they do different jobs. Email security stops malicious messages reaching inboxes; phishing simulation trains your people to spot the ones that still get through. Most businesses benefit from both.

[← Back to Protect your people and email](https://triplepoint.org.uk/security/people-and-email)

## Not sure what you need?

Tell us a little about your business and we'll recommend the controls that matter most for it — no obligation, and no jargon.

[Talk to us →](https://triplepoint.org.uk/contact?about=Email%20security) or [see every security area →](https://triplepoint.org.uk/security)

---

## Navigation

- Parent: [Email and people protection](https://triplepoint.org.uk/security/people-and-email.md)
- Next: [Phishing simulation & security awareness training](https://triplepoint.org.uk/security/people-and-email/phishing-simulation.md)