About InboxGuards

InboxGuards is a self-serve email-takeover alarm for organizations that use Microsoft 365 or Google Workspace. It connects with customer-admin authorization, checks available sign-in and mailbox-configuration audit records at the fastest cadence available on standard Microsoft 365 and Google Workspace plans — no premium security licensing required — and alerts you when a configured detection rule matches. You own the alerts and decide what happens next — it is an alarm, not a staffed watch service.

What we watch for. Suspicious logins from unfamiliar locations, sneaky inbox forwarding and hiding rules, sudden permission changes, and other configured indicators of an account takeover — plus a daily dark-web check of every mailbox address in your directory against Have I Been Pwned and LeakCheck, including info-stealer logs. Alerts are written in plain English with general response guidance. Your administrator or separately authorized IT provider decides and performs any tenant changes.

Who it's for. Owners, office managers, and IT generalists at companies without a dedicated security team. If you handle invoices, payroll, or client data over email, you're a target — and InboxGuards is your early-warning alarm.

Who builds it. InboxGuards is a product of Orion CMD LLC (Omaha, Nebraska). The Google Workspace Marketplace listing is published by Orion CMD LLC. Orion CMD LLC also bills the monitoring subscription at inboxguards.com. The Microsoft Marketplace (AppSource) listing is published under our DME Computer Services, LLC partner account on Microsoft's side. Both names point to the same builders behind DME Computer Services’ managed IT practice. Marketplace install is permission to connect; paid monitoring is separate. The InboxGuards subscription does not include hands-on remediation or incident response; use an administrator or IT provider already authorized to manage your environment, or separately authorize the optional $199 flat-fee remediation service from your dashboard.

Arm your inbox

Add bounded monitoring to supported audit records.