RiskIQ for Email Security

Be Smarter About Finding Phish

Identify and Block Phishing Attempts


Every day, threat actors send millions of malicious emails to their targets. Attackers target employees of enterprises to gain access to internal systems, as well as customers to fool them into handing over payment card info or login credentials. Subjects of their attack emails range from ad campaigns soliciting views of a particular product to deliberately stealing system credentials or financial information.

Security teams need a solution for their email security, one that tracks against a wide range of sources to provide accurate, comprehensive coverage against rapidly growing phishing threats to identify quickly evolving phishing attempts directed at your organization, customers, and partners at scale.

RiskIQ and You:


Enterprise security programs often utilize automated, internal phishing detection systems to detect phish targeting employees, but these systems don’t see or protect against phishing threats to customers and partners. RiskIQ’s email security can scan emails from your internal phishing systems as well as suspected emails submitted by customers through an external-facing abuse box. RiskIQ then applies intelligence to find, confirm, and take down phish.

The RiskIQ External Threat Management platform continuously scans web pages from Domain-based Message Authentication, Reporting and Conformance (DMARC), blacklists, threat intelligence vendors, email abuse boxes, and referrer log integrations for known phishing signatures. Meanwhile, our machine learning classification algorithm and virtual user technology finds and confirms unreported phishing pages.

With RiskIQ:

Automate your workflow to shorten the mean time to mitigation per phish. RiskIQ crawls URLs on demand, automating URL investigations from Proxy, Email, DNS, and HTTP referrers and enriching internal logs with real-time intelligence.

Know where the phish are. RiskIQ detects phish with data beyond that found in an email—social media, digital ads, and known phish events within the RiskIQ index compiled from over 30 million phishing pages scanned.

Scan your Abuse Box. Suspicious emails sent to employees and customers can be forwarded to an abuse box, and RiskIQ will scan emails and follow links with our virtual user technology, automating the phishing detection and confirmation process.

Manage the phish lifecycle. From detection to takedown, RiskIQ can automate the phish detection and confirmation process. The platform allows you to submit pages directly to Google Safe Browsing and Microsoft to block the attacker’s campaign.

Reduce your security team’s time to detection and phish remediation by utilizing RiskIQ to automatically analyze emails from your DMARC platform, spam filters, and abuse box. RiskIQ’s virtual user technology will crawl all of the links in emails, checking for matching blacklisted URLs, known phishing pages, or pages hosting malware and tighten the email security.

Uncover additional phishing infrastructure by Investigating confirmed phishing infrastructure using PassiveTotal to uncover additional sources for phish or malicious campaigns against your users and brand.