IRONSCALES Email Protect vs Rspamd

IRONSCALES Email Protect is a cloud email-security product that scans links and attachments and uses Adaptive AI with customizable automation. Its detection covers phishing, business email compromise, VIP impersonation, QR code attacks, and generative AI attacks. Themis automatically classifies, clusters, and remediates threats identified by machine learning or reported by users. Native API connections support Microsoft 365 and Google Workspace without MX record changes or agents. The platform can also connect with SIEM, SOAR, XDR, and EDR systems for incident-response workflows. Optional email encryption uses OTP and AES-256 encryption in transit and at rest; a separate add-on provides policy-triggered encryption with DLP templates for HIPAA, PCI, and GDPR. IRONSCALES describes a threat intelligence network of more than 36,000 security professionals across more than 18,000 organizations. The company states it is SOC 2 Type II certified, with the report available to customers by written request. Pricing is on request, and a 14-day free trial is available. Listed platforms are Android, iOS, API, and web.

Rspamd is an email security engine for filtering phishing, business email compromise, malicious attachments, and spam. It scores messages using reputation, sender authentication, content analysis, and machine learning. Authentication checks cover SPF, DKIM, DMARC, and ARC; malware scanning can use ClamAV or commercial antivirus engines. Administrators can define custom rules through the Lua API and configurable maps and selectors. Rspamd works with mail transfer agents including Postfix, Exim, and Sendmail, and its ClickHouse and Elasticsearch integrations provide visibility into attack patterns and detection rates. It is designed for gateway deployment and can run on-premises, keeping message data in the operator's environment without a mandatory vendor cloud. The detection engine is open source under Apache 2.0 and is available for Linux, macOS, and self-hosted use. Rspamd says its event-driven C core scans hundreds of messages per second per core and can scale from a single server to billions of messages a day. The open-source engine is listed at free. Scale costs £100 a month, with 5K mailboxes; hosted and enterprise plans have custom pricing. Premium plans offer support from core engineers, with enterprise SLA options.