Canary
Pre-Delivery Protection
Suspicious mail is pulled out of reach before the user ever sees it.
How containment happens
Before the full scan completes, a fast-track check pulls high-confidence threats into a hold folder. Confirmed-clean mail is released automatically; anything malicious stays contained. Every hold and release is entered into the tamper-evident audit trail.