New capabilities, available to every tenant today.

Display-name spoof, image-based phish, and brand impersonation — caught by consensus, not a single lucky hit.

Relationship-aware detection catches vendor compromise, typosquat replies, and bank-change social engineering.

Collaboration security across Teams chat, SharePoint, and OneDrive — not only mailboxes.

Multiple threat feeds, tenant identity signals, and cross-MSP reputation — folded into one consensus verdict.

A new indicator lands → historical mail is re-scored → confirmed threats are removed from every inbox.

Wrapped links are unwrapped; suspicious ones are rendered safely in a controlled browser.

An attacker slipping a malicious reply into your established thread? Detected.

When identity flags an account as compromised, mail detection responds automatically.

One-click reporting that actually feeds the detector — not a black hole.

Mailing lists and forwards stop being falsely flagged as phishing.

'Here is your invoice, password is 2026' attacks no longer evade scanning.

Native export to Splunk, Microsoft Sentinel, and Elastic — every verdict searchable in your SIEM.