Email Security

JCPIT’s managed email security is for small businesses that need phishing and impersonation scams stopped before staff see them. We handle the Microsoft 365 or Google Workspace setup, quarantine suspicious mail, and respond when something looks wrong. Our SMB1001 Gold-certified team in Croydon keeps the process simple and plain English.

Source: Australian Cyber Security Centre, Annual Cyber Threat Report.

Your Email Is Still a Common Attack Path

The ACSC says phishing and credential theft remain common entry points for Australian businesses. A fake invoice, password reset, or CEO impersonation email can be enough to start an incident.

JCPIT’s email protection scans messages before they reach your team and quarantines suspicious mail for review.

What is business email compromise?

Business email compromise (BEC) is when an attacker impersonates a trusted person — like a CEO, supplier, or accountant — to push through a payment change, harvest credentials, or redirect money. Fake invoice scams are one of the most common BEC patterns for Australian small businesses.

How fake invoice scams usually work

We look for lookalike domains, unusual payment requests, reply-chain hijacks, and urgent language that pressures staff to pay the wrong account. That makes it easier to catch invoice fraud before money leaves the business.

Email security for Microsoft 365 and Google Workspace

Microsoft 365 and Google Workspace both help with baseline filtering, but attackers still get through with spoofed domains, malicious links, and account takeovers. JCPIT adds managed monitoring, quarantine review, and response so suspicious mail gets handled consistently.

What We Catch

• Phishing emails — Fake login pages, credential harvesting attempts, and deceptive links that trick people into giving away passwords
• Business Email Compromise (BEC) — Impersonation attacks where someone pretends to be your CEO, supplier, or accountant to request payments or sensitive data
• Malware and ransomware — Dangerous attachments including zero-day threats that traditional antivirus misses, caught through sandboxing and parallel analysis
• Malicious URLs — Links are checked at the time of click, not just when the email arrives, so delayed attacks are still caught
• Internal email threats — We even scan emails sent between people in your organisation, stopping threats that spread laterally

How It Works

1. API-based scanning — No changes to your email settings needed. We connect directly to Microsoft 365 or Google Workspace via secure API. No MX record changes, no gateway to configure.
2. Pre-delivery inspection — Emails are analysed before they land in the inbox. Threats are quarantined automatically.
3. Click-time URL protection — Every link in every email is rewritten and checked at the moment someone clicks it.
4. Encrypted attachment handling — Even password-protected files are inspected for hidden threats.
5. 24/7 monitoring — Our security operations centre watches for alerts and responds to incidents around the clock.

Powered by Check Point Harmony

We use Check Point Harmony Email Security — the same enterprise-grade protection used by large corporations — integrated directly into our management platform. You get world-class email security without the complexity or cost of managing it yourself.

The ACSC continues to treat phishing and credential theft as common entry points for Australian businesses.

What You Get

• AI-based anti-phishing that checks for suspicious patterns and impersonation cues
• Zero-day malware defence with sandboxing
• BEC and impersonation detection
• URL rewriting and click-time analysis
• Allow/block list management
• Quarantine management via our platform
• Monthly reporting on threats caught

Frequently asked questions