Bahrain, Saudi Arabia
ProofpointStop email threats before they reach your people, and protect the data they handle
Proofpoint focuses on people-centred security: protecting email and collaboration tools from phishing and impersonation, preventing data loss, and training staff to recognise attacks.
- API or gateway
- Core Email Protection deploys via API or as an email gateway
- Email authentication
- Email Fraud Defense helps implement DMARC and monitor domains
- Data loss prevention
- DLP across email, cloud and endpoints, with insider threat management
- Security awareness
- ZenGuide delivers risk-based security learning
Problems Proofpoint is used to solve
Email remains one of the most common ways attacks start. These are the issues that usually lead organisations to Proofpoint.
| Topic | What it can lead to | How Proofpoint helps |
|---|---|---|
| Phishing that gets past built-in filters | What it can lead to: Stolen credentials, malware and ransomware starting from a single click. | How Proofpoint helps: Core Email Protection detects and blocks email threats using Proofpoint threat intelligence, with removal of threats found after delivery. |
| Business email compromise | What it can lead to: Fraudulent payment requests and invoice changes that look genuine. | How Proofpoint helps: Detection of impersonation and fraud, plus Supplier Threat Protection for attacks through trusted third parties. |
| Attackers sending email as your domain | What it can lead to: Customers and partners receive convincing spoofed messages, and your own email deliverability suffers. | How Proofpoint helps: Email Fraud Defense helps roll out DMARC (Domain-based Message Authentication, Reporting and Conformance) and monitors look-alike domains. |
| Compromised accounts | What it can lead to: An attacker inside a mailbox can read data and send trusted messages. | How Proofpoint helps: Account Takeover Protection detects, investigates and remediates account takeovers. |
| Sensitive data sent to the wrong place | What it can lead to: Accidental or deliberate data loss through email, cloud or endpoints. | How Proofpoint helps: Adaptive Email DLP, Enterprise DLP and Insider Threat Management. |
| Staff who do not recognise attacks | What it can lead to: Repeated clicks on phishing and poor reporting of suspicious messages. | How Proofpoint helps: ZenGuide risk-based security learning, targeted at the users who need it most. |
What Proofpoint does
Proofpoint has a large portfolio. These are the capabilities most organisations evaluate first.
Email threat protection
Core Email Protection stops phishing, malware and business email compromise, deployed through an API or as a gateway in front of your mail system.
Email authentication and fraud defence
Email Fraud Defense protects your domains from impersonation through DMARC and domain monitoring. Secure Email Relay secures email sent by applications.
Account takeover protection
Detects, investigates and remediates compromised accounts, with identity threat defence to find exposures that allow lateral movement.
Data loss prevention
Email DLP and encryption, behavioural Adaptive Email DLP, and Enterprise DLP across email, cloud and endpoints.
Security awareness
ZenGuide delivers automated, risk-based security learning, and the Human Resilience Workbench identifies high-risk users.
Communications archiving and compliance
Capture, archive and supervise digital communications for compliance and legal discovery.
API or gateway: two ways to deploy email protection
Proofpoint Core Email Protection can be deployed through an API connection to Microsoft 365 or as a secure email gateway. The difference is when and how email is inspected.
| Topic | API deployment | Gateway deployment |
|---|---|---|
| How it connects | API deployment: Connects to the mailbox platform, such as Microsoft 365 through Microsoft Graph | Gateway deployment: Mail is routed through Proofpoint before it reaches your mail system |
| Mail routing (MX) changes | API deployment: No MX record or mail flow changes | Gateway deployment: MX records point to the gateway |
| When threats are caught | API deployment: Scans messages and removes malicious email after delivery | Gateway deployment: Inspects email inline, before delivery |
| Typical use | API deployment: Fast deployment alongside the built-in protection of Microsoft 365 | Gateway deployment: Organisations that want inspection and policy control before mail is delivered |
Some organisations combine both approaches. Setting up the Microsoft 365 API integration requires a Global Administrator, according to Proofpoint. Confirm the right model for your environment with Proofpoint or our team.
Email security self-check
Basic email controls worth confirming in any organisation, whatever product you use. Nothing you tick is saved or sent.
How VirtuThinko helps you adopt Proofpoint
- 01
Requirements
We can help you review your mail platform, current protection and priorities, and choose the relevant Proofpoint products.
- 02
Demo or proof of concept
An evaluation on your own mail flow, for example through an API connection that does not change mail routing.
- 03
Design and deployment
Integration with Microsoft 365 or Google Workspace, mail routing where needed, and initial policies.
- 04
Tuning and handover
Policy tuning, DMARC rollout support, documentation and training for administrators.
- 05
Ongoing support
Help with policy changes, investigations and new modules.
Proofpoint positions Core Email Protection as an additional layer on top of Microsoft 365 and Google Workspace protection, focused on phishing, business email compromise and other advanced threats. A proof of concept on your own mail is the best way to judge the difference.
Not with API deployment. Proofpoint states that the API approach scans messages and removes malicious email without changing MX records or mail flow. Gateway deployment does route mail through Proofpoint.
DMARC (Domain-based Message Authentication, Reporting and Conformance) lets you tell receiving servers what to do with mail that fails authentication checks for your domain. Proofpoint Email Fraud Defense helps implement DMARC and monitor domains that impersonate you.
Yes. Proofpoint states that its API deployment rescans delivered email and automatically removes threats identified later.
Yes. Proofpoint offers email DLP and encryption, Adaptive Email DLP, Enterprise DLP across email, cloud and endpoints, and Insider Threat Management.
Explore Proofpoint for your organisation
Tell us which mail platform you use, how many mailboxes you have, and the threats or data risks that concern you most. A member of our team will contact you to arrange an initial conversation.