Block CFO impersonation at a bank
A bank blocks BEC attacks impersonating the CFO with Writing Style DNA — preventing ~$3M in potential losses over six months.
Trend Micro · Cybersecurity
Trend Email Security
Advanced email threat protection for Microsoft 365 and Google Workspace.
Quick answer
Trend Email Security is a cloud service that protects Microsoft 365 and Google Workspace email accounts from BEC (Business Email Compromise), phishing, ransomware and account-takeover attacks. AI and Writing Style DNA analysis stop both known and unknown threats.
Trend Email Security is built on the reality that 91% of email threats arrive via email. It is a cloud email security gateway with API-based integration for M365 and Google Workspace; no MX change is required and activation completes in seconds.
Writing Style DNA learns each user's writing style and flags style deviations at send time — catching CEO/CFO impersonation attacks. It achieves 85%+ detection on BEC alone.
ATA (Account Takeover) detection monitors sign-in behavior, IP, device fingerprint and activity anomalies to detect compromised accounts and terminate the session. Trend Vision One XDR receives the email sensor as part of its telemetry feed.
Key features
What it offers
- BEC and CEO-impersonation detection
- URL and attachment sandbox analysis
- Account takeover (ATO) detection
- DLP and encryption
- Microsoft 365 + Google Workspace integration
- Writing Style DNA — per-user style learning
- DMARC, DKIM, SPF reporting and enforcement
- Vision One XDR email sensor
Tech Summary
Important technical data
- Integration
- API-based (Graph API, Gmail API)
- Deployment time
- < 1 hour (no MX change)
- Management
- Trend Cloud App Security console
- Sandbox
- Custom + Trend Cloud Sandbox
- Licensing
- Per user, annual
- Data regions
- EU (Frankfurt), US, JP, AU
Use CasesFinance Legal Government Logistics
When would you choose this product?
Client-communications DLP
A law firm prevents accidental disclosure of client data via DLP policies; warning + approval flows fire before send.
Phishing-campaign detection
A ministry blocks targeted phishing campaigns with URL sandbox + threat intelligence, paired with user training.
Supplier email spoofing
A logistics firm blocks BEC attacks impersonating suppliers via domain-spoofing analysis — reducing fake-invoice incidents.
Who is it for?
Any organization using M365 or Google Workspace (5+ users).
Frequently Asked Questions
Frequently asked questions
Do I need to change my MX record?
No. Trend Email Security integrates via API (Graph API for M365, Gmail API for Google). No MX change is needed; mail flow continues uninterrupted.
Does it run alongside Microsoft Defender for Office 365?
Yes, no conflicts. Both layers can be used together — although for cost reasons most organizations pick one. Trend tends to outperform Defender in BEC and ATA detection.
How much data does Writing Style DNA need to learn?
Typically 30 days of email samples per user. The model is built quickly and detects deviations with 95%+ accuracy.
Can users see quarantined emails?
Yes. The user can access a self-service portal or receive a daily digest email. Authorized release of messages is allowed inside policy bounds.
Are DLP policies KVKK-compliant?
Yes. Pre-built templates cover Turkish national ID, IBAN, credit card, phone, email and other KVKK-relevant personal-data classes. Custom regex can be added.
Is there an Outlook plugin?
Yes. The Phish Insight Outlook plugin lets users one-click report suspicious emails; reported emails are auto-analyzed.
How is the license computed?
Per protected mailbox, annual. Shared mailboxes don't count. Typical pricing $25–40 per user per year.
How much sandbox latency is added?
Known-safe files pass through with no delay. Files routed to sandbox add an average 30–90 seconds — visible as a small email-delivery delay.
Are DMARC reports surfaced?
Yes. Trend Email Security includes DMARC monitoring and enforcement; it shows spoofing attempts of your domain and enforces policy.
How do I select the data region?
At license activation you pick from EU (Frankfurt), US, JP or AU. EU is recommended for KVKK compliance. Region change requires re-onboarding.
Vendor's official product page
Opens the vendor's original technical documentation and product page in a new tab.
Trend Micro — Trend Email Security →From the same brand
Trend Micro family — other products
Trend Vision One
AI-driven platform unifying XDR, ASRM and cyber risk management in a single console.
DetailsApex One
AI-driven enterprise endpoint protection (EPP + EDR).
DetailsWorry-Free Business Security
Cloud-based endpoint + email protection for SMBs.
DetailsDeep Security / Server & Workload Protection
Hybrid workload security for physical, virtual and cloud servers.
DetailsComparable Solutions
Similar solutions from other brands
Trend Email Security licensing + deployment + support
Sora Yazılım handles licensing, deployment, training and ongoing management — all from a single team.