External forwarding
Find mailboxes quietly forwarding mail outside your organization.
Keep every mailbox hardened
Real-time posture scoring for your entire mailspace. Himaya's agents flag risky rules, delegations and forwarding, so inboxes stay hardened over time.
See it work
Find risky mailbox settings, and fix them in one click
Himaya scores every mailbox, surfaces risky apps, rules, forwards and delegates, and removes them with a confirmation.
Inbox PostureScan Now21/ 100
Posture Score PoorScore calculated from posture metrics.
High-risk apps11
High-risk rules2
External forwards1
TypeMailboxDestination / delegateStatusRiskActions
Forwardmaya@northwind.iomaya.personal@gmail.comActiveHighExternalDisable Forward
Delegatesecurity@northwind.ioomar@northwind.ioRemovedMedium
Delegatesecurity@northwind.iolena@northwind.ioActiveMediumRemove Delegate
Delegatesecurity@northwind.iosam@northwind.ioActiveMediumRemove Delegate
How it works
From mailbox to flag
- Step 1
Inventory
Himaya lists every mailbox in your tenant.
- Step 2
Inspect
Inbox rules, delegations and forwarding settings are checked for each one.
- Step 3
Score
Each mailbox gets a posture score that updates as settings change.
- Step 4
Flag
Risky changes are fixed automatically where your policies allow, or raised for your team with the context needed to fix them.
Capabilities
What Inbox Posture covers
Suspicious inbox rules
Flag rules that hide, delete or redirect mail, a common sign of account takeover.
Delegation review
See who has access to whose mailbox, and spot access that should not be there.
Risky OAuth apps
Identify third-party apps with broad access to mailbox data.
Posture over time
Track each mailbox's score so drift is caught early.
Tenant-wide view
One view across the whole mailspace, so you can see which mailboxes need attention.
How we build it
Designed to be trusted
- Takeovers often leave traces in mailbox settings before anything else.
- Every flag comes with the mailbox, the setting and why it matters.
- Posture is scored continuously, not once a quarter.
Further reading
From our research
Article
The AI Phishing Surge: Why Your Inbox Just Became the Front Line
Generative AI has industrialized social engineering, and the inbox is where the damage lands first.
WhitepaperThe Agentic Shift in Data & Email Security
Why autonomous, reasoning-driven defense is the only durable answer to AI-powered threats.
Frequently asked questions
Why do inbox rules matter?
After taking over an account, attackers often add rules that forward, hide or delete mail so they stay unnoticed. Reviewing those rules catches takeovers that sign-in alerts miss.
Does Himaya change mailbox settings automatically?
Yes, depending on the policies you set. Himaya flags risky inbox rules, delegations and forwarding, then fixes them automatically where your policies allow, or holds them for your team to review.
How is this different from email security?
Email security judges each message. Inbox posture checks how each mailbox is configured, which is where a takeover often shows first.
The platform
Works with the rest of Himaya
Each module deploys on its own, and they share one context layer when you run them together.
- Hive MindHive Mind connects separate alerts into one attack chain
- Email SecurityAgentic email security that investigates like a team of senior analysts
- Data Loss PreventionData loss prevention that reads before it sends
- DSPMSee every data store, and what is exposed in it
- Falcon Agent & MCPYour agentic security engineer, in Himaya and in your AI tools
- Data SovereigntyKnow where your data lives, and keep it there
- ComplianceCompliance evidence that collects itself
See Himaya Inbox Posture in your workspace
Book a walkthrough to learn more.