IRONSCALES
About
IRONSCALES is an AI-powered email security platform that protects organizations against phishing, business email compromise, account takeover, deepfakes, and other advanced email threats. The platform integrates natively via API with Microsoft 365 and Google Workspace, using Adaptive AI, three autonomous agents, and crowdsourced intelligence from 36,000+ security professionals across 18,000+ organizations. It serves enterprises, MSPs, and MSSPs with capabilities including threat detection, autom...
Technology Categories
Details
VenSearch Intelligence
Ideal Customer
- IRONSCALES primarily targets mid-market and enterprise organizations, and has been ranked #1 in G2's Mid-Market Implementation Index for Intelligent Email Protection.
- Its go-to-market model also heavily serves SMBs through its 3,500+ MSP and MSSP partner network.
Key Differentiators
- IRONSCALES positions itself as the only email security platform that combines Adaptive AI (with NLP/NLU behavioral baselines and social graphs), agentic AI automation (Themis), and a crowdsourced human intelligence network of 36,000+ security professionals across 18,000+ organizations—providing a feedback loop that continuously hardens detection across all customer tenants.
- It is the only email security vendor with integrated deepfake protection for Microsoft Teams meetings, detecting both visual and voice impersonation without recording sessions.
Industries Served
- IRONSCALES serves a broad range of industries, with documented customer verticals including banking and financial services, healthcare and hospital systems, government and public sector, education (K-12 and higher ed), manufacturing, retail and consumer services, hospitality, telecom, media, transportation, insurance, consulting, non-profits, and MSPs/MSSPs.
- The platform is particularly well-suited for security-sensitive sectors such as financial services, healthcare, and government contracting where business email compromise and credential theft carry the highest financial risk.
Service Coverage
- IRONSCALES operates globally, protecting more than 18,000 organizations worldwide across a wide range of geographies.
- The company is headquartered in Atlanta, Georgia (opened 2017), with its original R&D base in Tel Aviv, Israel, and additional team presence in the UK, Ukraine, Germany, and other countries across 12 nations.
Partnerships
- IRONSCALES follows a 100% channel-centric go-to-market model and integrates natively with Microsoft 365 (via Microsoft Graph API) and Google Workspace as its foundational platform partnerships.
- It also integrates with SIEM, SOAR, XDR, EDR, ITSM, and PSA tools including Splunk, ServiceNow, and ConnectWise.
Company Size
- IRONSCALES was founded in December 2013/2014 by Eyal Benishti, an alumnus of the Israel Defense Forces' Intelligence Technology unit, and incubated through a top cybersecurity venture program.
- The company currently employs approximately 150–177 people across offices in the US, Israel, UK, Ukraine, and Germany.
Ownership
- IRONSCALES is a privately held, venture capital-backed company and has not pursued an IPO.
- The company has raised a total of approximately $95 million across six funding rounds since its 2016 seed round of $1.5M.
Compliance & Certifications
- IRONSCALES holds ISO/IEC 27001:2022 and ISO/IEC 42001:2023 (AI management systems) certifications, as well as SOC 2 Type 2, confirmed via an independent Big Four CPA firm audit.
- The platform is also noted as GDPR compliant, HIPAA compliant, PCI compliant, FedRAMP compliant, and CSA STAR Level 1 compliant per third-party security profile assessments.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
22 offerings@Scale Reseller Partner Program
A partner program for resellers to elevate their business by selling IRONSCALES email security solutions to their customers. The program is listed alongside the MSP/MSSP partner program as a distinct channel engagement track. Details on program structure and benefits are referenced on the site under the Partner section.
Account Takeover Attack Protection
A solution within the IRONSCALES platform that prevents, detects, and responds to account takeover attacks in real time. It monitors for behavioral anomalies that indicate compromised accounts and shuts down account takeover incidents as they occur. The solution integrates with the broader Adaptive AI platform for automated detection and remediation.
Adaptive AI
The core AI engine within the IRONSCALES platform that uses NLP and NLU to build behavioral baselines and social graphs for every mailbox, learning how users normally communicate. It continuously performs real-time reputation, content, and behavioral analysis to detect malicious threats including never-seen-before attacks, and is refined through Human-in-the-Loop learning from over 36,000 security experts. Specialized ML models include Sender Relationship Analysis, Entity and Keyword Reputation, and Computer Vision.
Advanced Malware & URL Attack Protection
A solution that combines behavioral analysis, reputation checks, and computer vision to detect and block malware, ransomware, malicious links, and weaponized attachments in email before they reach users. It identifies threats including macro-laced documents, password-protected ZIP files, spoofed domains, and sandbox-evading malware by analyzing behavioral patterns rather than relying solely on signatures. Upon detection, similar threats are automatically clustered and quarantined across all affected inboxes.
Business Email Compromise Protection
A solution that uses Adaptive AI behavioral analysis and authentication to detect BEC attacks including invoice fraud, impersonation, and vendor compromise that lack traditional malicious payloads. The platform creates communication baselines and social graphs for each employee using NLP to identify email anomalies based on content and intent in real time. Upon detection, agentic automation clusters similar incidents and removes all variants across the environment, with over 99% of threats remediated automatically.
Credential Theft Protection
A solution designed to stop credential theft attacks that slip past existing email defenses. It is part of the broader IRONSCALES platform and uses Adaptive AI behavioral analysis to detect credential harvesting attempts delivered via email. The solution integrates with the platform's automated remediation capabilities to respond to detected threats.
Deepfake Attack Protection
The only integrated deepfake protection for Microsoft Teams meetings, verifying participant identities in real time using both visual and voice behavioral and biometric analysis without recording or transcribing meetings. Voice detection works independently of video, catching impersonation attempts even when cameras are off, and employee identity profiles are built automatically from normal meeting activity with zero-touch enrollment requiring no manual uploads or IT involvement. Detection layers behavioral and biometric analysis on top of identity verification to cover the full attack chain from email to account takeover to deepfake.
DMARC Management
An automated DMARC management solution that handles DMARC, SPF, DKIM configuration, reporting, and monitoring all within one platform. It ensures only trusted senders can use an organization's domain, preventing the domain from being used as a lure in phishing campaigns. The solution is available as an interactive product tour demonstrating automated configuration and ongoing monitoring capabilities.
Email Encryption
An outbound email encryption solution where the Adaptive AI reads the context of outbound messages and applies encryption automatically based on policy rather than requiring users to manually choose to encrypt. It provides inbound and outbound email risk coverage within a single platform, giving compliance teams enforceable controls that can be demonstrated during audits. The solution is designed so that sensitive data leaves the organization protected by policy, not reliant on user action.
Human Risk Management
An integrated module combining phishing simulation, security awareness training (SAT), and per-user risk scoring, all built into the same platform that protects inboxes. The platform uses advanced social graphs to identify individuals or departments most at risk due to frequent targeting, past test failures, or lack of previous exposure, and automatically tailors simulations to each employee's specific threat profile. Customers report a 3x increase in cyber awareness and 90% fewer clicks on phishing links.
IRONSCALES AI Email Security Platform
A cloud-based email security platform that deploys via native API integration with Microsoft 365 and Google Workspace in minutes with no MX record changes. It uses Adaptive AI to build behavioral baselines and social graphs for every mailbox, detecting and auto-remediating 99%+ of phishing, BEC, malware, spam, and other advanced email threats. The platform is enriched by crowdsourced threat intelligence from 36,000+ security professionals across 18,000+ organizations.
MSP / MSSP Email Security Program
A multi-tenant email security offering for managed service providers and managed security service providers that provides one console for managing every client, with per-tenant policies and consolidated reporting. The program includes human risk management and phishing simulation testing for each client and is trusted by 3,000+ MSPs. Onboarding takes minutes and the platform is designed to automate busywork and grow with an MSP's book of business.
Phishing Simulation Agent
An AI agent powered by Anthropic's Claude that gathers real OSINT on employees including social media profiles, data breach exposure, and recent job changes to generate hyper-personalized phishing simulations in each employee's native language. It scores user vulnerability across four factors (click history, reporting rate, role severity, and training gaps), clusters employees who share exploitable context into Phishing Threat Clusters, and lets administrators approve one sample per cluster rather than reviewing hundreds individually. Each simulation is tied to a verifiable source such as a post, event, or press release.
Phishing Simulation Testing
A phishing simulation testing module that uses GPT-powered capabilities to craft highly realistic simulations inspired by real phishing attacks, including spear phishing campaigns targeting VIPs and frequently targeted employees. The platform automatically tailors simulations to each employee's specific threat profile using advanced social graphs and allows administrators to launch personalized AI-generated spear phishing simulation campaigns in minutes. Real phishing attacks can also be transformed into training tools instantly via the Template from Threat feature.
Phishing SOC Agent
An AI agent that performs L2-level forensic investigation of suspicious emails in approximately 97 seconds, running five parallel analysis tracks simultaneously: sender verification, body analysis for social engineering, URL chain inspection, attachment detonation across 100+ malware engines with sandbox detonation, and relay path tracing. It delivers a complete Security Assessment with a clear verdict (Safe, Phishing, or Spam), key evidence, and a full activity log ready for reporting, escalation, or compliance review. It eliminates the need to queue tickets or wait for a human analyst.
Red Teaming Agent
An AI agent powered by Anthropic's Claude that performs continuous OSINT reconnaissance on an organization the same way attackers would, scanning LinkedIn, Facebook, press releases, job postings, and vendor relationships. It generates attack simulations from what it finds and feeds them directly into the Adaptive AI detection models, hardening defenses before real attacks arrive. Reconnaissance runs on a recurring schedule or on demand, and all adversarial modeling runs under Anthropic's Cyber Verification Program safeguards.
Security Awareness Training
A security awareness training module within the IRONSCALES platform that delivers engaging, streamlined cybersecurity training courses to employees to enhance organization-wide cyber awareness. Training campaigns can be set up effortlessly and track employee performance over time, with 98% enrollment achieved by month 8 in reported deployments. The module includes tools such as dynamic warning banners and a report phishing button powered by an AI Copilot called Themis.
SEG Augmentation
A deployment model where IRONSCALES is added alongside an existing secure email gateway (SEG) such as Proofpoint, Mimecast, Barracuda, or Cisco IronPort to catch the phishing attacks the SEG misses. The platform integrates via API at the mailbox level with no MX record changes, providing inbox-level behavioral AI detection that complements perimeter-based gateway filtering. IRONSCALES data from 1,900+ organizations shows the volume of attacks various SEGs pass through each month by organization size.
SEG Replacement
A deployment model where IRONSCALES fully replaces an existing secure email gateway, providing complete email security protection via native API integration with Microsoft 365 or Google Workspace. The platform eliminates the need for complex MX record changes and traditional gateway management rules and policies. It is described as close to a set-it-and-forget-it solution compared to the daily management a traditional gateway requires.
SOC Automation
A project-based solution offering that uses IRONSCALES' Agentic AI to automate security operations center workflows around email threat detection, investigation, and remediation. Themis, the virtual SOC agent, autonomously classifies, clusters, and remediates threats, reducing manual analyst workload and cutting phishing remediation from hours to minutes. Administrators can configure the level of automation from full autopilot to analyst-in-the-loop depending on the use case.
Themis (Agentic AI Virtual SOC)
IRONSCALES' agentic AI virtual SOC that autonomously classifies, clusters, and remediates threats detected by machine learning models or reported by users. When a threat is detected, Themis automatically groups related messages and incidents, then takes appropriate action including quarantine, escalation, or autonomous resolution. Administrators can configure automation thresholds ranging from full autopilot to human-in-the-loop based on their preferences.
Themis Copilot
A GPT-powered AI assistant embedded within the IRONSCALES platform that empowers employees to report email threats directly and receive real-time guidance and training when they encounter suspicious emails. The Copilot provides in-the-moment education to reinforce security protocols and enhance overall vigilance. It is available as an interactive product tour on the IRONSCALES website.
Considering IRONSCALES?
Our team will work with you to determine if IRONSCALES is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.