CTE Email Security Cloud-Only
Email Security That Tells You Exactly Why It Blocked Something
CTE Email Security extends the same threat-intelligence engine that already powers Cybereinforce's browser-level enforcement into the inbox — catching credential phishing, device-code attacks, lure chains disguised as shared files, and payment fraud, with every verdict explained in plain language instead of a black-box score.
One engine, checked at delivery — and again at click.
Every link gets a second, independent check at the moment it's clicked, not just when the email arrives — because a domain can go from clean to weaponized in between.
Unsure about an email? Open it where it can't touch you.
PhishSecure opens the email and its links in an isolated browser running in the cloud. Your people see a live picture of the page, while everything on it stays away from their device and your network.
Nothing reaches the device
Scripts, redirects and credential pages all run in the remote browser. File downloads are blocked inside the session.
Private by design
Sessions are never recorded, and the email's content is never written to our storage. Sessions run in a region matched to your tenant.
Visible to your security team
Every page opened or blocked is logged as a security event for your tenant, and your admin panel shows the PhishSecure time remaining.
| Your plan | PhishSecure time included |
|---|---|
| Up to 500 mailboxes | 1 hour per month |
| 501 – 750 mailboxes | 90 minutes per month |
| 751 – 1,000 mailboxes | 2 hours per month |
| Above 1,000 mailboxes | 30 more minutes per month for every 250 mailboxes |
| Trial | 10 minutes in total |
Paid time renews every month. Only the time a session actually runs is counted. Each session lasts up to 3 minutes, and a new session starts when at least 3 minutes remain.
Built for the threats that make up real-world volume.
Multi-hop lure chains
Catches the "shared file — sign in to view" pattern: a legitimate SharePoint/Drive/Dropbox link that redirects off-domain to a real credential-theft page.
Device-code phishing
Detects pages that direct victims to the real Microsoft device-login flow with a stolen code — a pattern with almost no legitimate false-positive path.
Payment fraud (IBAN)
Validates IBAN checksums and financial-action language directly in plain-text emails — the invoice-fraud category most link-focused vendors miss entirely.
First-contact awareness
Flags first-time senders, forged "RE:" replies with no real prior thread, and links that don't match a known sender's historical pattern.
Domain-age assume-breach
Domains under 2 years old presenting a credential form trigger a warning by default — no corroborating signal required.
SPF / DKIM / DMARC posture
Surfaces spoofable domains without alarm fatigue — calibrated to actual enforcement strength, not every misconfigured sender.
Choose your balance of speed and certainty.
Connectivity over Security
Mail delivers immediately; scanning happens in parallel. Matches move to quarantine retroactively.
Balanced
Held up to 60 seconds or until scanning finishes, whichever comes first — then released either way.
Security First
Held until scanning is fully complete, then released to inbox or quarantine based on the outcome.
Deliver, Links Inert
Mail delivers and is fully readable immediately, but every link stays inert until scanning clears — no cutover required.
One package. Every feature. No tiers to compare.
Unlike the browser product, CTE Email Security ships as a single package — every client gets every detection capability, plus PhishSecure. Price scales with mailbox count.
| Mailboxes | Price / mailbox / month |
|---|---|
| 50 – 100 | $1.88 |
| 101 – 500 | $1.60 |
| 501 – 1,000 | $1.37 |
| 1,001 – 5,000 | $1.14 |
| 5,001 – 10,000 | $0.99 |
| 10,001+ | $0.95 |
Request Beta Access
CTE Email Security is in beta with select Cybereinforce clients. Tell us a bit about your environment and we'll be in touch.