InboxGuards is a self-serve email-takeover alarm for Microsoft 365. It reads your own tenant's audit log and alerts you when sign-in or mailbox-rule activity looks like business email compromise. You own the alerts and decide what happens next. Works on standard Microsoft 365 Business plans — no premium security licensing required.
According to the FBI's IC3 report, $20.9 billion was lost to cybercrime in 2025 — business email compromise alone cost $3.05 billion, and 86% of those BEC losses moved by wire or ACH before anyone noticed. InboxGuards is a self-serve email security monitoring service for small businesses. It connects to your Google Workspace or Microsoft 365 account with read-only access to your audit logs, checks them every 15 minutes, and alerts you in plain English when sign-in or mailbox-rule activity looks like a business email compromise. You own the alerts and you decide what happens next. $4 per user per month, $199 one-time setup. Built and operated by DME Computer Services in Omaha, Nebraska.
Business email compromise coverage is now standard in most cyber insurance policies, and insurers increasingly require documented email-monitoring controls. InboxGuards provides timestamped alerts, weekly summaries, and downloadable reports that businesses can share as supporting evidence during underwriting and renewals. Whether any control meets a specific insurer's requirements is determined by that insurer. Learn more at inboxguards.com/cyber-insurance .
InboxGuards deliberately does not sit between you and an attacker. It does not promise to catch every incident, and no one at DME is standing by to act on your behalf unless you ask. When something looks wrong, the alert goes to you, with a timestamped record in your portal. That boundary is intentional: it keeps the product honest about what it can promise, and it is why the price is $4 per user a month instead of several hundred.
30-day money-back guarantee. There is no free trial to keep track of and nothing that quietly expires. Subscribe, connect your tenant, and if InboxGuards is not worth it within the first 30 days, ask and you get the full amount back.
Most account-takeover detection is sold on top of Microsoft Entra ID P1 or Defender licensing, which puts it out of reach for a ten-person business. InboxGuards uses the Office 365 Management Activity API instead. That interface is available on standard Microsoft 365 Business plans at no additional licensing cost, so a small business can get takeover alerting without upgrading every user's license.
In a typical attack, someone gets a password, signs in quietly, and creates an inbox rule that hides replies from a specific vendor or client. Then they wait, watch a real invoice conversation, and step in with new payment details. Nothing looks broken. No file is encrypted, no alarm sounds, and the business usually finds out when a supplier asks where the money went. The window between the rule being created and the money moving is where an alert is worth something.
Small and mid-sized businesses on Microsoft 365 or Google Workspace that handle invoices, wire transfers, or client payments and do not have a security team. Construction, professional services, dental and medical practices, nonprofits, and small manufacturers. If you have ever paid an invoice by email, this is the failure mode worth alarming.
No. It is an alarm. It checks your audit log and alerts you. You decide the response. We do not monitor on your behalf and do not guarantee detection of every incident.
No. InboxGuards uses the Office 365 Management Activity API, included with standard Microsoft 365 Business plans.
InboxGuards works from audit-log metadata — who signed in, from where, and what rules changed. It is not built to read message contents.
A few minutes. A global administrator grants consent once, and alerting starts after the first audit-log pull.
DME Computer Services, a managed IT and cybersecurity provider in Omaha, Nebraska. Call 402-650-8407.
Connect your Microsoft 365 or Google Workspace account at inboxguards.com , or call DME Computer Services at 402-650-8407 with questions before you connect anything.