EU-hosted email security for Microsoft 365

The fraud Microsoft misses is already in your inboxes.

Guard works alongside Microsoft 365 to stop CEO impersonation, invoice fraud and the advanced phishing — lookalike domains, QR-codes, callback scams — that slips past the baseline. Live in minutes, nothing rerouted, nothing to rip out.

Free trial, no card No demo call — your own inbox is the demo EU-hosted & GDPR-ready From €2.50 per protected mailbox

0detection models
0to connect Microsoft 365
0EU-hosted, never sent to the US
0until you pick a plan
$2.77B
lost to business email compromise in a single year
#1
phishing is the most-reported cybercrime
+33%
year-over-year rise in reported losses
Source: FBI IC3 Internet Crime Report. Email remains the most-exploited route for fraud.
What Guard catches

The advanced attacks already reaching your people.

Today's fraud doesn't look like spam — it uses lookalike domains, QR codes and fake phone numbers to slip past Microsoft's baseline. From the moment you switch it on, Guard watches every incoming email and flags these techniques in real time, in your own mailboxes.

Critical
Spoofed senderA message forged to look like it came from your own company domain - landing in inboxes anyway.
Critical
CEO & VIP impersonationYour managing director's name on a message that's really from a stranger. Executives detected automatically.
Critical
Invoice & bank-details fraud"Please update our payment details" - the scam behind most six-figure wire losses.
Warning
Lookalike & homoglyph domainsA sender one character off your supplier's - or using Cyrillic/Greek look-alike letters - built to fool a quick glance from finance.
Critical
Reply-chain & thread hijackingA reply slipped into a real conversation from a compromised or spoofed account, so it looks like part of a thread you already trust.
Critical
Malicious links, fake logins & attachmentsCredential-stealing copies of the Microsoft sign-in page, hidden redirects and booby-trapped files - rewritten to a safe click, blocked when dangerous.
Warning
QR-code phishing (quishing)A login trap hidden inside a QR-code image to dodge link scanners. Guard decodes the code and checks where it really leads.
Warning
Callback & fake-support scams (TOAD)An email with no link - just a number to call, where a fake "agent" talks your staff into granting access or paying.

40+ detection models covering spoofing & authentication, impersonation, CEO & invoice fraud, lookalike domains, thread hijacking, malicious links & attachments, quishing and callback scams — improving for everyone automatically. Switch it on to see what's in your own mail. Start free →

Who it's for

One layer of protection. Three people who sleep better.

CEO / Owner

"Will we be the company that wires €200k to a fake supplier?"

A spoofed-CEO email or a fake invoice only has to work once - a hit to your cash flow, your operations, and your name.
Guard stops the impersonation and invoice-fraud emails before anyone clicks or pays. The money that never leaves is the product. Start a trial and watch real threats appear in your own inbox, not a datasheet.
IT Director / M365 Admin

"Another quarter of phishing reports and tuning Defender."

You already pay Microsoft, yet real attacks still land and staff keep reporting them. Rip-and-replace gateways aren't worth the project.
Add Guard on top of Microsoft in minutes - no mail rerouting, nothing to install, no project. It finds your VIPs automatically, lets one report shut a campaign down company-wide, and gives you your hours back.
CISO / Security Lead

"Insurance and audit want documented email controls, EU-hosted."

Cyber-insurance renewals and auditors now demand layered email defence, and data-residency rules disqualify many vendors.
EU-hosted, GDPR by design, DPA and sub-processor list ready, a full log of every action. Defensible coverage you can show an auditor - the box ticked before renewal season.
Why teams switch on Guard

Every vendor claims to catch what Microsoft misses. We let your own inbox prove it.

The big platforms sell through gated demo calls and annual contracts. Guard is self-serve: switch it on in minutes, see real threats in your own mail, pay only for the mailboxes you protect — hosted in the EU.

Microsoft 365 baseline Legacy gateways
(rerouting vendors)
Premium AI
(US-hosted)
Olyteck Guard
Catches what Microsoft misses It is the baselineYesYes Yes - a layer on top, not a replacement
Seeing it work Built inSales cycle + PoC projectGated demo call Self-serve trial - real threats in your own mail
Getting started Built inReroute your mail (DNS change)Connect by API One approval, nothing rerouted, minutes
Warns & teaches your staff LimitedBasic tagSome Plain-language banner + a "why was this flagged" page
One employee can protect everyone NoNoRare Yes - policy-based, company-wide takedown
Where your data lives Region-dependentOften US / globalTypically US EU-hosted, GDPR-ready
Pricing Per userEvery seat, quote-onlyQuote-only, large minimums Public pricing - only the mailboxes you choose
Minimum commitment License tierAnnual contractAnnual contract None - cancel anytime, prorated

Category comparison based on publicly documented vendor models. Guard positions as a layer on Microsoft, not a rip-and-replace.

How it works

Three steps. No mail rerouting. No IT project.

1

Connect Microsoft 365

Sign in with Microsoft and an administrator approves once. Guard only reads mail to spot threats - it never reroutes your email or changes a setting. Switch it off anytime.

~2 minutes
2

Choose who to protect

Guard finds your people and highlights VIPs and IT for you. You pick exactly who to cover, and pay only for those. Shared, disabled and guest mailboxes are free.

1 click
3

Protected from that moment on

Guard starts watching incoming mail right away. New threats are flagged as they arrive - a clear warning banner for staff, or moved to junk - all reversible.

Live in minutes
Why Guard

Built to complement Microsoft - and respect your budget.

Catches what Microsoft missesSpoofing, impersonation, invoice fraud, malicious links and attachments the baseline lets through. A layer on top, nothing to rip out.
Live in minutes, adopted in daysNo mail rerouting, no install, no project. Your team is protected far faster than with legacy gateways.
One person can protect everyoneA single employee reports a suspicious email and Guard removes it across the whole company, following the policy you set.
Teaches your people as it protectsEvery risky email gets a plain-language warning banner and a "why was this flagged" page, so staff learn to spot the next one.
Honest billing - pay for who you protectShared, disabled and guest mailboxes are always free. Public pricing, no "pay for every account" trap, no hidden minimums.
EU-hosted and GDPR-readyYour email stays in the EU, never sent to the US. DPA and sub-processor list published for your auditor.
Always reversible, always loggedWarning banners and move-to-junk can be undone, and every action is recorded for compliance.
VIPs protected automaticallyYour executives and admins are found and shielded from impersonation from day one.
Security & privacy

Hosted in the EU. Always reversible. Built for your auditor.

We protect your mail without owning your data or rerouting your email - and every promise here is built into the product, not just the policy.

🇪🇺 Your data stays in the EUHosted in the EU and never transferred to the US - the data-residency box your auditor needs ticked.
🔐 It can only watch, never meddleGuard reads mail to detect threats. It can't send email, open your files, or change your tenant settings.
📝 Compliance-ready by designNothing is rerouted, message contents aren't stored, every action is logged, and a DPA and sub-processor list are published.
Pricing

Public pricing. Per protected mailbox.

No quote-only games. You pay only for the people you choose to protect. Annual saves two months.

Essentials
€2.50
per protected mailbox / month

Banners, link protection, and fraud, phishing & impersonation detection.

Most popular
Business
€4.50
per protected mailbox / month

+ Custom rules & model tuning, client reporting (PDF/CSV/XLSX), 1-year retention & priority support.

Start free trial →
Need a dedicated, isolated deployment, SSO or a custom DPA? Enterprise has it - talk to us.
All prices are in euros (EUR) per monitored mailbox. VAT is not currently charged — the operator benefits from the French VAT franchise (TVA non applicable, art. 293 B du CGI). If this changes, EU VAT will be added at checkout by Stripe Tax based on your billing country, and VAT-registered EU businesses outside France can supply a valid VAT number for the B2B reverse charge. See the Terms §4.3.
FAQ

What every IT lead asks first.

Does Guard replace Microsoft Defender?

No - it works alongside it. Guard catches impersonation, invoice fraud and phishing that the Microsoft baseline misses, and complements your existing setup. No mail rerouting, nothing to rip out.

When does protection start, and does it check old emails?

The moment an administrator approves access. Guard begins watching incoming mail straight away and flags new threats as they arrive, usually within minutes. It protects mail going forward, so there's nothing to dig out of old archives.

What access does it need?

A one-time approval by an administrator lets Guard read incoming mail to detect threats, and add a warning banner or move a dangerous message to junk - all reversible. It never reroutes your email, sends mail, or changes other settings, and you can switch it off at any time from Microsoft.

Do I really not need a credit card to start?

Correct. Sign in with Microsoft, approve access, and you're protected. The free trial gives you full protection so you can see real threats in your own mail. Nothing converts to a paid plan automatically - when the trial ends, your past findings stay readable and you simply pick a plan to keep protecting new mail.

How does Guard help my staff, not just block mail?

Every risky message carries a plain-language warning banner explaining why it was flagged, with a "why was this flagged" page - so people learn to recognise the next attempt. And a single employee can report an obviously dangerous email; Guard then removes it across the whole company, following the policy you set.

Where is my data hosted?

In the EU. Your email is never sent to the US, and message contents aren't stored - Guard keeps only what it needs to show you the threat. A DPA and sub-processor list are published for your security review.

How am I billed?

Per protected mailbox, monthly or annually. Shared, disabled and guest mailboxes are always free - you pay only for the people you choose to protect. Adjust seats anytime; changes are prorated. No minimum contract.

Can we have a dedicated, isolated deployment?

Yes. For teams that need full data isolation for security review, our Enterprise plan offers a dedicated single-tenant deployment, with SSO and a custom DPA. Talk to us and we'll set it up.

We're an MSP managing several tenants - does that work?

Yes. Guard keeps each client separate in its own space. An MSP plan (a small per-tenant fee plus a per-protected-mailbox rate) and an operator console are available - start with a free trial on one tenant, then roll out.

Your inboxes have threats in them right now.

See them - free, in minutes, no sales call. Connect Microsoft 365 and watch exactly what's getting through, before you pay a cent.

Start free trial →
No credit card · EU-hosted · one admin approval · cancel anytime