CISO Tribune

Vendor comparison · 2 companies

IRONSCALES vs Material Security

IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. Material Security is the company behind Material, an automated cloud workspace security platform for lean security teams that need to protect the email, files, and accounts that live in Google Workspace and Microsoft 365. CISO Tribune files both under Email security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • IRONSCALES
  • Material Security
IRONSCALES vs Material Security: Products, Customers and Funding Compared
IRONSCALESIRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings.ironscales.comMaterial SecurityMaterial Security is the company behind Material, an automated cloud workspace security platform for lean security teams that need to protect the email, files, and accounts that live in Google Workspace and Microsoft 365.material.security
What it sells
  • Phishing SOC Agent[6][10]Delivers L2-level forensics on suspicious email.
  • Phishing Simulation Agent[6][10]Builds phishing simulations from OSINT gathered on employees.
  • Human Risk Management[11]Phishing simulation, security awareness training, and user risk scoring.
  • Themis[2][9]An agentic AI virtual SOC that classifies, clusters, and remediates threats.
  • Email Incident Management Service (EIMS)[12]IRONSCALES experts handle email threat investigation, remediation, and AI tuning.
  • Email Security[2][3][5][8]Remediates email attacks that bypass traditional controls in Google Workspace and Microsoft 365.
  • File Security[2][6][8][13]Finds sensitive data in files and remediates excessive permissions and sharing.
  • Account Security[2][7][8]Detects account takeovers, contains their impact and hardens accounts.
  • OAuth Remediation Agent[8]Watches third-party clients and AI agents across Google Workspace.
  • Drive Agent[9][10]Investigates and remediates over-shared sensitive documents in Google Drive.
Categories
Headquarters
Atlanta, United States[1][13]Redwood City, United States[1]
Founded
2014[1][13]2017[1][13]
Ownership and funding
Privately held[4][8]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 25, 2026[8]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[12]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs. One entry point addresses global companies that are transforming their email security to tackle modern threats. The site also presents a comparison of secure email gateways and API-based solutions for enterprises and MSPs.Not written yet
Last verified
November 2, 2026September 27, 2026

Where they overlap

  • Email security is the primary category of both IRONSCALES and Material Security.
  • Both are headquartered in the United States.

Where they differ, field by field

  • IRONSCALES is also filed under AI SOC analysts. Material Security is also filed under Data security posture management, SaaS security posture and Identity threat detection and response.
  • IRONSCALES lists Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS). Material Security lists Email Security, File Security, Account Security, OAuth Remediation Agent and Drive Agent.
  • IRONSCALES is headquartered in Atlanta, United States. Material Security is headquartered in Redwood City, United States.
  • IRONSCALES was founded in 2014. Material Security was founded in 2017.
  • IRONSCALES is privately held.

How they differ

CISO Tribune files IRONSCALES under Email security and AI SOC analysts, and files Material Security under Email security, Data security posture management, SaaS security posture, and Identity threat detection and response. Both list Email security as the primary category, and both connect to Microsoft 365 and Google Workspace through native APIs. IRONSCALES sells Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis, and Email Incident Management Service (EIMS), which covers phishing forensics, simulation, awareness training, and an expert-run service. Material Security sells Email Security, File Security, Account Security, OAuth Remediation Agent, and Drive Agent, which extend from email into files, accounts, and Google Drive permissions.

IRONSCALES is headquartered in Atlanta, United States, was founded in 2014, and is privately held. Its funding includes a Series B of $8 million led by Jump Capital and a Series C of $64 million led by PSG, bringing total financing to $80 million since 2015. Material Security is headquartered in Redwood City, United States, and was founded in 2017. It says it has raised venture capital from Martin Casado at Andreessen Horowitz, Elad Gil, and Trae Stephens at Founders Fund.

IRONSCALES sells mainly to enterprises and to MSPs and MSSPs, and serves organizations directly and through more than 3,500 MSP partners. Material Security describes its platform as built for lean security teams, and names Gusto as a company whose teams cut phishing triage by up to 91 percent with its automated user report response. IRONSCALES also describes Deepfake Protection for Microsoft Teams meetings, while Material Security states it has received a SOC 2 Type II Report.

What it sells: IRONSCALES

What Phishing SOC Agent does[6][10]
Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. The agent's output is a Security Assessment with a verdict, key evidence, and a full activity log of every step it took.
What Phishing Simulation Agent does[6][10]
Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization. Personalized phishing emails are written in each employee's native language, and one sample per employee cluster is approved by the customer.
What Human Risk Management does[11]
The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees.
What Themis does[2][9]
Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences.

What it sells: Material Security

What Email Security does[2][3][5][8]
Material runs on auto-pilot to remediate sophisticated email attacks that bypass traditional controls. It automates user report triage with AI-powered investigation and response workflows. It connects through native APIs rather than acting as a gateway.
What File Security does[2][6][8][13]
Material detects sensitive content in files and includes tools to automatically remediate excessive permissions and inappropriate sharing. It discovers and classifies sensitive data across Google Drive and maps it to every sharing permission.
What OAuth Remediation Agent does[8]
The agent classifies risk in real time and revokes access tokens the moment behavior turns suspicious. It can message the user in Slack to confirm whether an authorization was legitimate.

Questions about IRONSCALES and Material Security

What do IRONSCALES and Material Security sell?
IRONSCALES sells Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS). Material Security sells Email Security, File Security, Account Security, OAuth Remediation Agent and Drive Agent.
Are IRONSCALES and Material Security in the same category?
Yes. Email security is the primary category of both on CISO Tribune.
Where are IRONSCALES and Material Security headquartered?
IRONSCALES is headquartered in Atlanta, United States. Material Security is headquartered in Redwood City, United States.
When were IRONSCALES and Material Security founded?
IRONSCALES was founded in 2014. Material Security was founded in 2017.
Who owns IRONSCALES and Material Security?
IRONSCALES is privately held.
Who are IRONSCALES and Material Security sold to?
From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs.

About IRONSCALES

IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. IRONSCALES connects to Microsoft 365 or Google Workspace through a native API integration, with no MX record changes, no agents, and no mail flow disruption. IRONSCALES can be added behind an existing secure email gateway, and the gateway can be retired later.[7]

Adaptive AI builds a behavioral baseline and social graph using NLP and NLU, learning how users normally communicate. Adaptive AI provides real-time reputation, content, and behavioral analysis to detect malicious threats. Adaptive AI works at the mailbox level and sees internal and external traffic. IRONSCALES combines Adaptive AI with human insight from 36,000+ threat hunters across 18,000+ organizations, so an attack confirmed in one organization is blocked for the rest.[2][7]

Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences. IRONSCALES automates threat classification, incident clustering, quarantine actions, user notifications, and enrichment with threat intelligence. Admins can configure workflows from alert-only to fully automated remediation and end-user notification. When a user clicks the Report Phishing button, IRONSCALES scans the message, clusters it with similar emails, and evaluates it using Adaptive AI and community insights. The platform integrates with SIEM, SOAR, XDR, and EDR systems to support incident response workflows.[2][9]

Red Teaming Agent runs the same OSINT reconnaissance attackers run, pulling from social media, press releases, job postings, and vendor relationships. Red Teaming Agent generates attack simulations from what it finds. Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization.[6][10]

The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees. IRONSCALES experts handle email threat investigation, remediation, and AI tuning on the customer's behalf.[2][11][12]

Deepfake Protection analyzes voice independently of video, so it catches impersonation even when cameras are off. Protected identity profiles build automatically from normal meeting activity, with no manual uploads and no IT involvement. Outbound email encryption is elective or policy-based, with AES-256 encryption in transit and at rest. Hosted DMARC, SPF, and DKIM come with automated policy enforcement, SPF record flattening, and continuous monitoring with detailed authentication reports. Account takeover protection detects unauthorized access attempts to Microsoft user accounts to prevent data breaches, internal BEC attacks, and ransomware.[10][12]

IRONSCALES was founded in 2014 by alumni of the Israel Defense Forces' Intelligence Technology unit. IRONSCALES is headquartered in Atlanta, Georgia, and Tel Aviv, Israel. Series B funding of $8 million was led by Jump Capital, bringing total financing to $16 million since 2015. Series C funding of $64 million was led by PSG, bringing total financing to $80 million since 2015. Organizations worldwide are served both directly and through a network of more than 3,500 managed service provider (MSP) partners. For schools, the AI trains on actual attacks that target K-12 and higher education environments.[2][3][5][6][7][10][12][14][15][16]

IRONSCALES on the record

Sources

IRONSCALES full record

  1. [1]About usIRONSCALES · ironscales.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Platform | How It WorksIRONSCALES · undated page, accessed September 27, 2026 · Tier A
  3. [3]Ironscales raises series c funding roundIRONSCALES · ironscales.com · published December 7, 2021 · Tier A
  4. [4]Ironscales ipoForge Global · forgeglobal.com · undated page, accessed September 27, 2026 · Tier C
  5. [5]AI Email Security Platform for Phishing & Deepfakes | IronscalesIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  6. [6]Email Security AgentsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  7. [7]IRONSCALES | Complete Email Security & Training SolutionsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  8. [8]IRONSCALES Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 25, 2026 · Tier C
  9. [9]SOC Automation SolutionIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  10. [10]Platform | What's NewIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  11. [11]Platform | Human ElementIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  12. [12]Pricing | IronscalesIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  13. [13]IRONSCALES | About Us | Our StoryIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  14. [14]Education Email Security Solutions | IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  15. [15]Augment your Secure Email Gateway with IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  16. [16]DMARC Management and MonitoringIRONSCALES · undated page, accessed November 10, 2026 · Tier A

Material Security full record

  1. [1]Material Security Raises $40 Million Series B To Protect the Worlds Email From the Next SolarWinds AttackMaterial Security via Business Wire · businesswire.com · published May 26, 2021 · Tier A
  2. [2]ProductMaterial Security · material.security · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cloud Workspace Security Platform | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  4. [4]Deployment and Security | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  5. [5]Email Security Solutions for Google Workspace and Microsoft 365 | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  6. [6]File Security for Google Drive and Gmail | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  7. [7]Account Takeover Prevention & Detection | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  8. [8]OAuth Security That Stops Malicious Apps | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  9. [9]Material Security | Security for Google Workspace and Microsoft 365Material Security · undated page, accessed October 26, 2026 · Tier A
  10. [10]Google Drive Security for the Agentic AI Era | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  11. [11]Helping Secure Our Customers | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  12. [12]Material Security Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 26, 2026 · Tier C
  13. [13]About Us and Leadership | Material SecurityMaterial Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Our Pricing Packages | Material SecurityMaterial Security · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.