Material Security
API-based email security platform focused on account takeover, OAuth abuse, and message remediation.
Technical Architecture & Overview
Material Security connects to Google Workspace and Microsoft 365 over API and applies controls across messages, identity, and data. Detection covers BEC and credential phishing, while containment features remove delivered threats, surface risky forwarding rules, and govern OAuth application grants. For account takeover, it redacts sensitive messages and applies message-level access controls so stolen credentials cannot unlock password reset emails.
Targeted Technical Use Cases
Organizations that want mailbox-level controls and account-takeover containment rather than a traditional gateway.
Evaluation & Trade-offs
Core Strengths
- +Controls reach beyond message filtering into identity and OAuth governance.
- +Retroactive remediation of delivered mail.
- +Deployment works with both major cloud suites.
Trade-Offs & Limitations
- -Dependent on the cloud email provider APIs.
- -Priced per user per month with annual billing.
Defensive Security Application
Containing account takeover and removing delivered phishing before users interact with it.
Frequently Asked Questions
What is Material Security?→
Material Security connects to Google Workspace and Microsoft 365 over API and applies controls across messages, identity, and data. Detection covers BEC and credential phishing, while containment features remove delivered threats, surface risky forwarding rules, and govern OAuth application grants. For account takeover, it redacts sensitive messages and applies message-level access controls so stolen credentials cannot unlock password reset emails.
What is Material Security used for?→
Organizations that want mailbox-level controls and account-takeover containment rather than a traditional gateway.
What are the strengths of Material Security?→
- +Controls reach beyond message filtering into identity and OAuth governance.
- +Retroactive remediation of delivered mail.
- +Deployment works with both major cloud suites.
What are the limitations of Material Security?→
- +Dependent on the cloud email provider APIs.
- +Priced per user per month with annual billing.
How is Material Security used defensively?→
Containing account takeover and removing delivered phishing before users interact with it.