Company record · security vendor
IRONSCALES
Where IRONSCALES appears on the record (55)
Every page on CISO Tribune and its network that carries this company, 55 in all.
- Compared with (52)
vs 7AI, vs Abnormal AI, vs Adaptive Security, vs Anomali, vs Barracuda Networks, vs Beacon, vs Binary Defense, vs Broadcom, vs Check Point Software Technologies, vs Cofense, vs Conifers, vs CyberKord, vs Cynet, vs D3 Security, vs Darktrace, vs Doppel, vs Dropzone AI, vs Egress, vs Exabeam, vs Exaforce, vs Graylog, vs Guardz, vs Gurucul, vs Hornetsecurity, vs Hunters, vs Intezer, vs Judy Security, vs Kai, vs KnowBe4, vs Legion Security, vs Leidos, vs Mate Security, vs Material Security, vs Mave, vs Mimecast, vs NINJIO, vs Panther, vs Proofpoint, vs Prophet Security, vs ReliaQuest, vs Rival Security, vs RunReveal, vs Securonix, vs Stellar Cyber, vs Sublime Security, vs Swimlane, vs ThreatDefence, vs Tines, vs Torq, vs Trend Micro, vs Trustifi, vs Virtru
- In the vendor directory (3)
- Email security vendors · primary category
- AI SOC analysts vendors · category
- SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide
What the company sells
IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. IRONSCALES connects to Microsoft 365 or Google Workspace through a native API integration, with no MX record changes, no agents, and no mail flow disruption. IRONSCALES can be added behind an existing secure email gateway, and the gateway can be retired later.
Adaptive AI builds a behavioral baseline and social graph using NLP and NLU, learning how users normally communicate. Adaptive AI provides real-time reputation, content, and behavioral analysis to detect malicious threats. Adaptive AI works at the mailbox level and sees internal and external traffic. IRONSCALES combines Adaptive AI with human insight from 36,000+ threat hunters across 18,000+ organizations, so an attack confirmed in one organization is blocked for the rest.
Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences. IRONSCALES automates threat classification, incident clustering, quarantine actions, user notifications, and enrichment with threat intelligence. Admins can configure workflows from alert-only to fully automated remediation and end-user notification. When a user clicks the Report Phishing button, IRONSCALES scans the message, clusters it with similar emails, and evaluates it using Adaptive AI and community insights. The platform integrates with SIEM, SOAR, XDR, and EDR systems to support incident response workflows.
Red Teaming Agent runs the same OSINT reconnaissance attackers run, pulling from social media, press releases, job postings, and vendor relationships. Red Teaming Agent generates attack simulations from what it finds. Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization.
The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees. IRONSCALES experts handle email threat investigation, remediation, and AI tuning on the customer's behalf.
Deepfake Protection analyzes voice independently of video, so it catches impersonation even when cameras are off. Protected identity profiles build automatically from normal meeting activity, with no manual uploads and no IT involvement. Outbound email encryption is elective or policy-based, with AES-256 encryption in transit and at rest. Hosted DMARC, SPF, and DKIM come with automated policy enforcement, SPF record flattening, and continuous monitoring with detailed authentication reports. Account takeover protection detects unauthorized access attempts to Microsoft user accounts to prevent data breaches, internal BEC attacks, and ransomware.
IRONSCALES was founded in 2014 by alumni of the Israel Defense Forces' Intelligence Technology unit. IRONSCALES is headquartered in Atlanta, Georgia, and Tel Aviv, Israel. Series B funding of $8 million was led by Jump Capital, bringing total financing to $16 million since 2015. Series C funding of $64 million was led by PSG, bringing total financing to $80 million since 2015. Organizations worldwide are served both directly and through a network of more than 3,500 managed service provider (MSP) partners. For schools, the AI trains on actual attacks that target K-12 and higher education environments.[2][3][5][6][7][9][10][11][12][14][15][16]
- Categories
- CISO on record
- Not yet on our record. Send a verified source
- Website
- ironscales.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
Delivers L2-level forensics on suspicious email.
Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. The agent's output is a Security Assessment with a verdict, key evidence, and a full activity log of every step it took.
Phishing Simulation Agent[6][10]
Builds phishing simulations from OSINT gathered on employees.
Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization. Personalized phishing emails are written in each employee's native language, and one sample per employee cluster is approved by the customer.
Human Risk Management[11]
Phishing simulation, security awareness training, and user risk scoring.
The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees.
An agentic AI virtual SOC that classifies, clusters, and remediates threats.
Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences.
Email Incident Management Service (EIMS)[12]
IRONSCALES experts handle email threat investigation, remediation, and AI tuning.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of IRONSCALES's categories, then alphabetical. A list from the record, never a ranking.
On email security, IRONSCALES competes with Sublime Security, Abnormal AI, Barracuda Networks, Cofense, Egress, Hornetsecurity, Material Security, Mimecast, Proofpoint, Trustifi and 12 more.
On ai soc analysts, IRONSCALES competes with 7AI, Anomali, Conifers, CyberKord, Dropzone AI, Exaforce, Intezer, Kai, Legion Security, Mate Security and 21 more.
What review platforms show
The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]About usIRONSCALES · ironscales.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [2]Platform | How It WorksIRONSCALES · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [3]Ironscales raises series c funding roundIRONSCALES · ironscales.com · published December 7, 2021 · Tier A: the company, a regulator or a filing
- [4]Ironscales ipoForge Global · forgeglobal.com · undated page, accessed September 27, 2026 · Tier C
- [5]AI Email Security Platform for Phishing & Deepfakes | IronscalesIRONSCALES · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
- [6]Email Security AgentsIRONSCALES · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
- [7]IRONSCALES | Complete Email Security & Training SolutionsIRONSCALES · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
- [8]IRONSCALES Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 25, 2026 · Tier C
- [9]SOC Automation SolutionIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [10]Platform | What's NewIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [11]Platform | Human ElementIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [12]Pricing | IronscalesIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [13]IRONSCALES | About Us | Our StoryIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [14]Education Email Security Solutions | IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [15]Augment your Secure Email Gateway with IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [16]DMARC Management and MonitoringIRONSCALES · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 27, 2026, expanded November 10, 2026 from the references above.
Work for IRONSCALES? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Security leadership
CISO Tribune has not yet recorded who holds the top security seat at IRONSCALES. We add a seat only from a verified source; if you have one, send it to the desk.
Questions CISOs ask about IRONSCALES
- What does IRONSCALES sell?
- IRONSCALES sells Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS). Phishing SOC Agent: Delivers L2-level forensics on suspicious email. Phishing Simulation Agent: Builds phishing simulations from OSINT gathered on employees. Human Risk Management: Phishing simulation, security awareness training, and user risk scoring. Themis: An agentic AI virtual SOC that classifies, clusters, and remediates threats.
- Who does IRONSCALES fit?
- From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs. One entry point addresses global companies that are transforming their email security to tackle modern threats. The site also presents a comparison of secure email gateways and API-based solutions for enterprises and MSPs.
- How does CISO Tribune file IRONSCALES?
- CISO Tribune files IRONSCALES under Email security, with AI SOC analysts as a secondary category.
- Where is IRONSCALES headquartered?
- IRONSCALES is headquartered in Atlanta, United States.
- When was IRONSCALES founded?
- IRONSCALES was founded in 2014.
- Who owns IRONSCALES?
- IRONSCALES is privately held.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.