URL reputation
Configured Google Web Risk Lookup checks known phishing, malware and unwanted-software URLs. A site absent from those lists may still be unsafe.
EMAIL SECURITY · PACKAGE 2
Phishing protection for links in email
An email link can lead somewhere different by the time it is opened. SecuraWall Email Security can check supported wrapped links when a user clicks and again before continuing to the destination.
An everyday example
An employee receives an invoice link that redirects to an unfamiliar sign-in page. With link protection enabled, a configured block, a listed risky URL or an incomplete inspection can stop the user from continuing through the protected link.
Illustrative scenario; this is not a live message or a detection-rate claim.
How it works
- Receive and protectEligible incoming mail passes through the gateway. Enabled link wrapping replaces supported body links with protected links.
- Check at click timeThe check screen evaluates current domain authorization and configured URL policies. Enabled Google Web Risk Lookup adds URL reputation.
- Recheck before continuingContinue performs another check. A blocked or unavailable result offers no Continue; an allowed result is not a guarantee that the site is safe.
What your IT team can control
Redirect and sign-in signals
Bounded static inspection follows supported redirects and examines supported password-form actions. It does not execute JavaScript or submit a form.
Layered message checks
Sender authentication, BEC, attachment and QR/OCR policies provide separate signals. Accepting one check does not cancel another security decision.
Coverage and responsibilities
- Link protection applies to supported wrapped links, not every link a user encounters or a URL copied around the check screen.
- Full checked URLs, including path and query, are sent to Google when its integration is enabled. Destination-visible inspection requests can consume one-time links.
- Google API errors or local quota exhaustion make enabled reputation checks unavailable. Link rewriting can affect original DKIM/ARC signatures downstream.
Choose the incoming security gateway
Email Security requires SecuraWall as the only published MX and a separate real receiving destination. Your mailboxes remain with your provider. Backup MX does not include these inspection or personal quarantine controls; the SMTP Relay add-on does not enable incoming protection.
Explore Email Security Compare pricing