eWall
Inbound email security for Microsoft 365 and Google Workspace. Point a client’s MX records at eWall and spam, phishing, impersonation and malware are stopped before they reach the mailbox, with a per-user quarantine, a plain explanation of every verdict, and a console built for managing many tenants at once.
Message log
Last 24 hoursReleaseWhy it was held
A managed platform run by Tech911. Contact us for pricing and availability for your clients’ domains.
Stop the bad mail before it reaches the mailbox
Every inbound message is authenticated, scanned and scored before it is relayed to Microsoft 365 or Google Workspace. What fails is rejected at the door or held for review. What passes arrives with the results stamped in its headers.
Spam and phishing filtering
Layered scanners score every message: sender reputation, SPF, DKIM and DMARC, link and attachment analysis, content patterns, and a Bayesian filter that learns from what your users release and report.
Impersonation and BEC defense
Display names that match a real person at the client, lookalike domains, changed payment details and gift-card requests are caught by name, with an AI second opinion on anything borderline.
Malware and attachment control
Antivirus on every attachment, blocked file types even inside zips, disguised executables identified by their real content, and Office macros and encrypted archives flagged before anyone opens them.
Per-user quarantine
Held mail waits in a quarantine each user can open with their Microsoft or Google sign-in: preview it, release it, release and allow the sender, or report it as spam. A digest email lists what was held, with one-click release.
Every verdict explained
Open any message in the log and see exactly why it scored what it did: each signal, its weight and the authentication results. A “why was this blocked” question takes seconds, not a support case.
Nothing lost, nothing bypassed
A message is only accepted once it is safely stored and queued, and retried with backoff if the client’s platform is down. The tenant is locked to eWall during onboarding, so mail cannot route around the filter.
Live in an afternoon, with no gap in mail flow
Verify and connect
Add the client’s domain, prove ownership with a DNS record, and set the destination. eWall test-connects to Microsoft 365 or Google Workspace and confirms TLS.
Sync the directory
Users and groups sync from the client’s tenant every 30 minutes, so eWall knows every valid recipient and every display name worth protecting. Unknown addresses are refused at the door.
Cut the MX over
Point MX at eWall and mail flows through the filter from that moment. The old path stays open while DNS propagates, so nothing is dropped in between.
What’s included
- Inbound filtering for Microsoft 365 and Google Workspace domains
- SPF, DKIM, DMARC and ARC authentication, with the results sealed and passed through so the destination trusts them
- Reputation, link, attachment, content, antivirus and Bayesian scanning, plus an AI second opinion on borderline mail
- Impersonation protection tied to the client’s real directory
- Per-user quarantine with Microsoft and Google sign-in, and digest emails with one-click release
- Allow and block lists at customer, domain and mailbox level, with per-client tag, hold and reject thresholds
- Full message log with a scoring breakdown, and an audit trail of every release and policy change
- Retention that expires held mail and prunes history on the schedule you set
- Hosted and run by Tech911
For the MSP running this
- Multi-tenant throughout: your organization, then customers, domains and mailboxes in one hierarchy. An MSP admin sees every client, a client admin sees one, and a user sees only their own held mail.
- Reporting you can hand over: per-client counts of what was delivered, tagged, held and rejected, and a log that answers “where is my email” without a support case.
- Monthly, per mailbox: no minimum count, no annual commitment, and no repricing once your clients are onboarded.
- We do the migration: domain verification, directory consent, locking the tenant to the filter and the MX cutover, one client at a time, with the old path kept open until the new one is proven.
- Your data stays yours: held mail, logs and policies are exportable if you leave, and we will document that before you sign anything.
What it costs you per mailbox
Email security is the one line item every client already expects to pay for, and the one the incumbent gateways price as if it were the whole stack. eWall is monthly per mailbox at a fraction of the established gateways, so the margin on that line stays with you.
Put a wall in front of every mailbox you manage
Tell us about your clients’ tenants and we will get their mail protected.