IRONSCALES Pricing
AI-powered phishing protection that works at the mailbox level, with automated remediation and built-in user training. Protecting more than 100 mailboxes? Talk to the team for a customised quote.
Email Protect
$65/yr
Per User
£48/yr
Per User
€57/yr
Per User
A$92/yr
Per User
Includes:
- AI anti-phishing with mailbox-level scanning
- Adaptive AI spam hygiene
- Comprehensive link and attachment scanning
- User-reported email handling and automated triage
- Automated remediation across all inboxes
Complete Protect
$96/yr
Per User
£70/yr
Per User
€83/yr
Per User
A$135/yr
Per User
Includes:
- Everything in Email Protect
- Account takeover protection
- Phishing simulation testing
- Security awareness training
- Autonomous campaigns
- Multi-tenant management and threat hunting
Custom Quote
Custom
Custom
Custom
Custom
Includes:
- Pricing for 100+ users
- Education, government and non-profit rates
- Multi-year terms
- Multi-tenant deployments
Optional add-ons
Add any of these to either plan. ATO and training are included with Complete Protect, so we'll tell you if moving up works out cheaper.
| Add-on | What it does | Price per user/per year |
|---|---|---|
| Account Takeover Protection (ATO) | Detects and responds to compromised accounts. Included in Complete Protect. | $7.20 |
| Security Awareness Training (SAT) | Phishing simulation and awareness training. Included in Complete Protect. | $12.00 |
| Email Encryption | Encrypts outbound email. Available on either plan. | $18.00 |
| Email Data Loss Prevention (DLP) | Controls what leaves your organisation over email. Available on either plan. | $30.00 |
| Email Incident Management Service (EIMS) | IRONSCALES analysts triage and resolve email incidents on your behalf. Available on either plan. | $12.00 |
Compare the plans
Every plan includes the IRONSCALES AI detection stack, incident dashboard, threat hunting and multi-tenant management. Email Protect adds spam hygiene and full link and attachment scanning. Complete Protect adds account takeover protection and the training suite.
| Feature | Email Essentials | Email Protect | Complete Protect |
|---|---|---|---|
| Advanced threat detection | Included | Included | Included |
| BEC and impersonation protection | Included | Included | Included |
| Incident dashboard and threat hunting | Included | Included | Included |
| Multi-tenant support | Included | Included | Included |
| Adaptive AI spam hygiene | - | Included | Included |
| Comprehensive link and attachment scanning | - | Included | Included |
| Account takeover protection | - | Add-on | Included |
| Phishing simulation testing | - | Add-on | Included |
| Security awareness training | - | Add-on | Included |
| Autonomous campaigns | - | Add-on | Included |
| Email encryption | - | Add-on | Add-on |
| Email data loss prevention | - | Add-on | Add-on |
| Email incident management service | - | Add-on | Add-on |
Frequently asked questions
What's the difference between the plans?
Email Essentials runs the core AI detection engine. Email Protect adds adaptive spam hygiene and comprehensive link and attachment scanning, and opens up the add-ons. Complete Protect includes account takeover protection and the full training suite as standard. All three include the incident dashboard, threat hunting and multi-tenant management.
Which plan do most customers choose?
Email Protect. It’s the point where the detection stack is complete and you can add capabilities as you need them. Complete Protect makes sense if you want training and account takeover protection from day one, since buying both as add-ons usually costs more than the tier upgrade.
What are the add-ons and can I add them later?
Account takeover protection, security awareness training, email encryption, data loss prevention and incident management. They can be added mid-term at any point and are prorated to your existing renewal date, so you keep one anniversary and one invoice.
Do we need to change our MX records?
No. IRONSCALES connects to Microsoft 365 or Google Workspace through the API, so there’s no change to mail routing and nothing to unpick if you move away. Most deployments are live the same day.
How does it compare to Microsoft Defender for Office 365?
Defender is a reasonable first layer and IRONSCALES is designed to sit behind it rather than replace it. Because it works at the mailbox rather than the perimeter, it sees internal email and post-delivery threats, and it removes a threat from every inbox once it’s found rather than only blocking the next one.
Can we trial it first?
Yes, 14 days against your real environment. We connect it, configure it properly, and at the end show you exactly what it caught and what your existing setup missed. If it isn’t finding anything your current stack is missing, we’ll tell you.