Stop chasing threats: how a fixed-target model changes email security
For decades, email security has played whack-a-mole: spot the newest threat, then patch for it. The moles keep getting smarter, and the hammer still swings the same way.
Decades of moving targets
- SPF let domain owners name their allowed mail servers, but lookalike domains passed it perfectly.
- DKIM added cryptographic signatures, so attackers set up their own domains and signed their mail.
- DMARC added alignment and policy, so attackers switched to lookalike domains, compromised accounts and display-name tricks.
Each layer helped, but none changed the game. Attackers adapt, and MSPs still hear the same client question: "How are all of these bad emails getting through?"
"Looks safe" is not enough
AI phishing can be polished, personal and technically authenticated. And legitimate newsletters, sales outreach and alerts still create noise. Users do not experience their inbox as a security verdict. They experience it as wanted or unwanted.
Define the good
Shield focuses on a fixed, predictable signal: desired mail. Optimize for what users actually want, and the malicious, suspicious and simply unwanted fall away.
- Zero trust foundation: unknown senders do not get into the inbox just because they look legitimate or pass authentication.
- A head start: Shield builds an initial trust network from people users have already emailed and trusted contacts inside their organization.
- User intent: it keeps refining that network as users trust or silence new senders.
What it means for MSPs
Your clients' users get a safer, quieter inbox. Your team spends less time explaining why safe-looking emails got through, chasing false positives or tuning settings for individual preferences.