$ ls -lt articles/

Articles

The most recent articles, newest first.

Jul 13, 2026Phishing8 min read
If phishing simulations work, why do they need a mandate?
Phishing simulations produce compliance artifacts, and that's why they persist even though they don't protect users. The technical case for moving the trust decision off the content an attacker controls.
Ben Hathaway·Chief Technology Officer
Jun 30, 2026Postmortem10 min read
How Microsoft 365 decides which tenant email belongs to
A new mail-flow rollout made Microsoft 365 attribute every customer's mail to our tenant. The undocumented rule behind it, and the fix.
Mailprotector·Engineering Team
Jun 1, 2026SMTP3 min read
HELO, world!
Why an email security company is starting an engineering blog, and what we plan to put here.
Ben Hathaway·Chief Technology Officer

If phishing simulations work, why do they need a mandate?