Material Security address DLP at rest in the user's mailbox by protecting the specific content by MFA policy after aging rules. This addresses your users who treat their mailbox like a file plan. If the mailbox is compromised, the sensitive data is not. The mailbox owner can recover the data by providing their assigned MFA method if they need the content. Moreover, this gives leaders a metric to fine-tune mailbox retention policies because they can see how often aged content is or is not accessed. Additionally, the product protects against account takeovers; the SaaS or Vendor unique accounts the employees have established with third parties are not bound to the company SSO. Should the employee's mailbox be compromised, the bad actor must have the employee's assigned MFA token to see a password change request from a third party. Again while the user mailbox may have been compromised, the sensitive content has not been exposed.

The material team helps us customize the product to our needs and the tool's simplicity because it reduces the time and resources needed to train new employees!

Material takes the risk out of email and it gets better all the time. Phishing herd immunity lets us fully automate our phishing response in 99% of situations. Account Take Over and Leak Prevention do exactly what they say they do and rolling them out was much easier than we expected. Definitely pilot it first with your email-heavy users, but once it's there, it's a lot harder for phishing to result in full compromise. My favorite part about Material Security is how great their product development team is. They listen to customers and are fast about building high-value new features. I love that there are events and an API now for us to automate even more of the workflow.