Proofpoint EFD Commercial Basic

Email security and protection

Dedicated consultants and expert guidance

To help you set up email authentication, Proofpoint creates a project plan for you. The plan has guided workflows that simplify the setup process. Our consultants help you through every step of the plan. We work with you to identify all your legitimate senders—including third parties and shadow IT—to make sure they authenticate properly. We also analyze your email environment to help you prioritize tasks based on your needs, such as email volume and top senders.

Hosted authentication services

  • Email Fraud Defense includes Proofpoint’s Hosted SPF, Hosted DKIM and Hosted DMARC services. These hosted services help you set up and manage policies for Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and DMARC. They are also geographically distributed, fault-tolerant services that ensure reliability.

Comprehensive brand protection

To protect your brand, Email Fraud Defense stops fraudulent emails from being sent using your trusted domains.

Identify lookalikes of your domains

  • Email Fraud Defense uses domain registration information from Proofpoint Domain Discover. It detects domains posing as your brand in email attacks or on phishing websites. Proofpoint analyzes millions of domains and connects registration data with our own data on email activity and attacks. We show you suspicious domains and how attackers are spoofing your brand. We also alert you when suspicious domains become active.

360-degree visibility across your email ecosystem

  • Email Fraud Defense shows all emails sent using your trusted domains. These include emails to consumer mailboxes, business gateways, and your own gateway. Our dashboard shows which of your domains attackers have tried to hijack and the abuse rate of each one. It shows authorized senders and their DMARC records as well as your policies and pass rates for SPF, DKIM and DMARC.

Visibility of supplier risks

Email Fraud Defense goes beyond DMARC setup to also show your supplier risks. Nexus Supplier Risk Explorer identifies your suppliers, checks their DMARC records and shows their risks. Our product shows you messages delivered from lookalike domains. By prioritizing alerts based on risk levels, we help you to focus on the most critical incidents.

Integration with Proofpoint Email Gateway

  • Email Fraud Defense works with the Proofpoint email gateway to enforce DMARC on inbound traffic. It helps you verify the DMARC reputation of a domain, so your gateway doesn’t block valid email that failed DMARC. It also helps you create override policies for valid email without reducing your security posture.

DMARC visibility for Microsoft 365

  • If you use Microsoft 365 with your mail exchange (MX) records pointed to Microsoft’s inbound servers, Email Fraud Defense can still show the DMARC compliance of your domains. This visibility helps you to enforce DMARC on inbound traffic from your domains with confidence.