For MSPs, CPAs, and insurance partners: monitoring your clients can prove

Managed service providers apply for partner access, and an operator reviews each application before anything is enabled. Once approved, the partner portal lists every client you are linked to with its security grade, unresolved-alert load, monitoring status, and the latest alerts — read-only, without signing in to each tenant.

Access to a client is never silent. Each link is offered to the client's own administrator, who accepts or declines it from their dashboard and can revoke it later; the full grant, acceptance, and revocation history is recorded.

• ■Add a client from the portal and send its administrator the setup invitation
• ■Choose per client whether the client or your firm pays — partner-paid seats are billed to you
• ■Adjust a client's alert routing, quiet hours, and approved regions on their behalf
• ■Monthly client scorecards carry your firm name and logo
• ■A Monday-morning digest across all your clients, flagging open critical alerts and tenants that need coverage review

Clients move money and sensitive documents by email, which makes business email compromise relevant to both accounting and insurance conversations.

InboxGuards records its own monitoring activity so a customer can share alerts and reports with its advisers. It does not determine whether a control satisfies an insurer, affects coverage, or changes a claim outcome.

InboxGuards connects to a client's Microsoft 365 tenant or Google Workspace with read-only access to supported audit logs and checks them at the fastest cadence available on standard Microsoft 365 and Google Workspace plans — no premium security licensing required. It checks supported audit events for configured account-takeover indicators and turns a finding into a plain-English alert with general response guidance.

• ■Sign-ins from IP addresses and locations the account has never used
• ■Inbox rules that forward, hide, or auto-delete mail — the concealment step in invoice fraud
• ■Repeated failed sign-ins followed by a success — the password-guessing signature
• ■Mailbox permission and delegation changes
• ■Admin role grants, OAuth app consents, and MFA or audit-logging changes
• ■Daily dark-web check of every directory email address against Have I Been Pwned and LeakCheck, including info-stealer logs

Microsoft 365 and Google Workspace audit logs may record sign-ins, rule changes, and administrative activity, subject to provider, licensing, retention, and API limits. Relevant supported events can go unreviewed when no one checks those records.

InboxGuards turns supported records into timestamped alerts, documented customer responses, and exportable reports. These records describe InboxGuards activity only; they are not an audit, certification, or insurer approval.

$2 per active user per month, no minimums — a 10-person client pays $240 a year, or $200 billed annually. Setup is self-serve and requires read-only consent from the customer's Microsoft 365 or Google Workspace administrator. The customer or its separately authorized IT provider remains responsible for responding to alerts and changing the tenant.

Evaluate InboxGuards on its monitoring, alerting, reporting, contract, and refund terms. Obtain the actual application or policy requirements from the customer's broker or carrier before representing that any control or document satisfies them.