JatzoCyber Security Menu

EMAIL SECURITY FOR MSPS AND IT SUPPORT COMPANIESStop answering
“is this email genuine?”
for free.

Your clients check suspicious messages themselves in Outlook or Gmail. Staff get a second opinion; your engineers get the evidence.

Start your 30 day partner trial ↗︎See how the partner model works ↓

You lead
the relationship.

Your clientsYou own the relationship and the first line.

Your consoleOne sign-in across every client.

Your offerFurther protection for your clients.

One monthly partner invoice.
Platform and second-line support from Jatzo.

The questions that arrive
without a ticket.

None of them is a fault, so none of them opens a proper job. They come as a forward, a message to whichever engineer answered last time, or somebody catching you at a review.

  • Is this genuine?
  • Has this supplier really changed their bank details?
  • Should I click this?
  • Why has Microsoft asked me to sign in again?
  • Can you check this invoice?

A proper answer is not a glance.

Answering one properly is about ten minutes of a trained person, and it is the same work every time.

  • The message headers, and what they actually say.
  • Whether authentication passed, and whether that means anything here.
  • Who the sender is behind the display name.
  • Where each link goes once the redirects are followed.
  • Whether the message is asking to send a payment somewhere new.
  • Attachments, and any QR code inside one.
  • What the sender is actually asking for.

Most of that time is absorbed into the support you already provide. Jatzo puts the first check inside the client's own mailbox, so fewer of these need an engineer at all. Some still will, and those arrive with the evidence already gathered.

It sits after your filtering,
not in front of it.

Jatzo is not asking you to take anything out. Spam filtering, the gateway, endpoint protection and whatever awareness product a client already has all keep doing their job. Jatzo serves the moment after them, when the message has arrived and somebody wants to know whether to trust it.

  1. 01 / ALREADY IN PLACE

    Your client's existing stack.

    Their mail platform and whatever filtering you have put in front of it. Unchanged.

  2. 02 / WHAT HAPPENS ANYWAY

    The message still arrives.

    Nothing about it was technically wrong, so nothing stopped it. That is why it is in the inbox.

  3. 03 / WHERE JATZO STARTS

    Somebody checks that one message.

    One button beside the email they are unsure about, in Outlook or Gmail. Nothing else is read.

  4. 04 / WHAT THEY GET

    A score, the evidence, a next step.

    Out of 100, with the reasons in plain English and what to do about it.

  5. 05 / WHEN IT NEEDS YOU

    It reaches your engineers with its working.

    Raised as a case your team can open, rather than a forwarded email and a question.

Jatzo does not sit in the mail flow. No MX rerouting, no transport rule, no connector, no mail migration, and no gateway to replace. There is nothing to roll back if a client stops.

How the evidence is handled ↗︎

Clear roles.
A stronger offer to clients.

YOU LEAD

Make it part
of your service.

Buy every seat at a discount off our published rate, at every client size. Our prices are published, so your client can see them and you price at or below them. The difference is your margin, and it holds as a client grows.

  • Your client relationship and selling price.
  • First-line support and people management.
  • Your own work around the product.
Ask for the partner information ↗︎

JATZO SUPPORTS YOU

The platform.
The evidence. The backup.

We provide the platform, its updates, detection work and evidence reports. Second-line support goes to your engineers.

  • Product updates and detection work.
  • Evidence your engineers can inspect.
  • One monthly invoice, itemised by client.

The current discount, account requirements and terms are in the partner information, sent to you rather than published here. What you actually make depends on that, on what you charge, and on what your service costs to deliver.

A tool your clients can use.
Evidence your engineers can inspect.

Jatzo checks the messages staff choose to send it, after their existing protection has had its turn. Give users a clearer next step and your team the reasons behind it.

From “is this safe?”
to a useful case.

Staff check a selected email in a supported inbox. They get practical guidance and a risk grade; your engineers can open the findings, review the evidence and help them decide what to verify.

Explore the inbox demo ↗︎
01 / THE PERSON

Clear guidance at the point of doubt.

What to do comes before the score. Plain English explanations help the person reading the email understand the concern.

02 / THE ENGINEER

Go from the verdict to the finding.

Inspect identity, authentication, links and supported attachment evidence. A reported authentication pass does not prove the request is trustworthy.

03 / THE SERVICE

A case you can follow up.

Review retained business cases, handle reports raised to IT and export the available reports. Evidence varies by source and plan.

Open up the evidence
behind the answer.

The published rule registry sets out what contributes to Jatzo’s analysis. Explore the checks, their categories and the threat techniques they relate to.

172registered checks
8kinds of evidence
30MITRE ATT&CK techniques
9MITRE ATT&CK tactics
  • 62Content
  • 30Sender
  • 27Attachment
  • 18Authentication
  • 14URL
  • 10Business
  • 7IP
  • 4Context

Published coverage, not a detection-rate claim. 140 checks carry a MITRE reference; 32 are deliberately unmapped, with the reasons published.

IDENTITY + AUTHENTICATION

Look beyond the display name.

Compare From, Reply-To and Return-Path with domain relationships and reported SPF, DKIM and DMARC results. A clean claim cannot cancel independent warning signs.

LINKS + QR DESTINATIONS

Inspect where the request leads.

Examine real destinations, embedded redirects and impersonation clues. Read supported QR codes and check their destinations like other links, within source and plan limits.

FILES + DELIVERY ROUTE

Inspect the supporting evidence.

Static checks cover supported document activity, extension mismatches, archives and embedded content. Available source-network checks add route and domain context.

EXPLAINABLE SCORING

Separate danger from nuisance.

Named findings explain the score, with overlapping detections grouped. Nuisance alone cannot push a message into the phishing band without enough threat evidence.

Supported attachments are inspected without executing them. Unavailable checks are recorded as uncertainty, not safety.

Inspect the published rule reference ↗︎

Many clients.
Clear boundaries.

Work in each client's own pages rather than a cut-down copy of them: invitations, removals, sender rules, case reviews, exports and reports.

  • Separate client recordsEach client has its own Jatzo organisation. One firm's evidence never sits beside another's, which matters the first time a client is asked to produce theirs.
  • Access you can account forEvery day one of your engineers opens a client's workspace is recorded in that client's own activity log, with the engineer's name and your company's against it.
  • Who changed whatEvery change to your clients' accounts, with the person against it and whether they are your engineer or the client's own: people, invitations, roles, seats, add-in sign-outs, settings, watched domains and training. From the day you take each client on, never before it. The account, never a message.
  • The calls your first line takesReset a password, or take a leaver out in one press that ends their access, signs them out of the add-in and stops a rollout setting their mailbox up again. Both from that client's page in your console.
  • Seats are yours, because the invoice isYou are invoiced for a client's seats, so you add one without asking them and nothing is charged to them. Their own page tells them to ask you.
  • Control stays with the clientRequiring a second step at sign-in of their whole team, handing their workspace to somebody else and deleting it stay with the client's own administrator. Security settings stay with them: you cannot weaken them, and you cannot switch them on for the client either.

The record is kept whatever the client's plan. Reading it on their Activity tab, and some of the reporting, comes with Business Pro.

Count the questions
you answered for nothing.

The licence margin is straightforward and the partner information sets it out for you. The number worth working out first is the one already coming out of your week, because it is usually the larger of the two and it never appears on an invoice.

40questions a month across your book
6.7hours of trained time, every month

An estimate from the three numbers you entered, not a measurement of your business. Ten minutes is what the partner information allows for a proper answer: headers, where the link really goes, and whether a supplier's bank details moved. Put your own hourly rate against the hours. That is the figure to weigh a licence against, and it is yours to work out rather than ours to claim.

Jatzo does not make these questions disappear. It moves the first check to the person holding the email, so fewer reach your service desk, and the ones that do arrive part answered.

The clients where one email
can move real money.

Jatzo works for any client you look after. It sells fastest to the ones where payment instructions arrive by email and nobody is watching the mailbox for a living. Roughly fifteen to a hundred staff is where that sits most often.

THE FIRMS THAT FEEL IT

Money moves
on an emailed instruction.

Law, accountancy and property most often, and any client with a finance or accounts team paying suppliers from what arrives in the inbox.

  • Firms holding or moving client money.
  • Finance and accounts teams paying on emailed instructions.
  • Clients with no dedicated security analyst of their own.

An ideal client profile, not a restriction. Business starts at 2 people and Business Pro at 5.

THE EMAIL THAT MATTERS

Usually the one
asking for money.

A supplier saying their bank details have changed. An invoice nobody expected. An urgent payment request from a familiar name. A payment destination that quietly moved.

  • Convincing enough to arrive, because nothing about it was technically wrong.
  • Jatzo gives the person about to act a second opinion before they do.
  • It cannot promise a message is safe, and it says so rather than implying otherwise.
The figures behind this ↗︎

No mail migration.
No rerouting.
No new delivery dependency.

Jatzo sits beside the message. It supports your existing filtering and escalation process, rather than taking over mail delivery.

Deploy through Microsoft 365.

Follow the central add-in deployment guide. No MX change, transport rule or connector is required. Microsoft takes 24 to 72 hours to reach everyone’s ribbon, or a small team can be invited by email.

Read-only mailbox access.

Jatzo can read the message being checked. It cannot send, reply, forward, move or delete email.

Check compatibility before rollout.

Host capabilities and plan coverage differ. Outlook and Gmail are both supported. Gmail sets a client's staff up on its own only once their domain is proved.

Current support and setup ↗︎

WHAT A BUSINESS PRO CLIENT ACTUALLY GETS

Protect. Monitor.
Train. Prove.

The four areas of Jatzo, and the shape of what you are selling. Business covers Protect and the organisation threat report; Business Pro adds the rest.

PROTECT · BUSINESS AND ABOVE

A clearer answer
in the inbox.

Staff check the message they are unsure about and get a score, the evidence and a next step. Cases land in the client’s workspace for your engineers to review.

Explore email analysis ↗︎
MONITOR · BUSINESS, THEN BUSINESS PRO

What reaches them,
and what changes.

The organisation threat report comes with Business and says which attacks are actually reaching a client. Business Pro adds Domain Watch: spoofing weaknesses and lookalike domains, checked daily.

What monitoring covers ↗︎
TRAIN · BUSINESS PRO

Practise the decisions
before they matter.

The training the threat report points at, assigned from the same page, with assessments and a certificate at the end.

Explore staff training ↗︎
PROVE · BUSINESS PRO

A record the client
can hand over.

Activity records with CSV export, and a dated proof pack covering people, training, checks and domains, for a client’s due diligence or an insurer’s questionnaire.

How the evidence is handled ↗︎

Areas of the platform, not a claim that every plan includes everything. The Invoice Fraud Checker is a separate Windows licence with its own trial and is never part of Business or Business Pro.

Explore invoice checks ↗︎

Start with the team
your clients trust.

Give your engineers time with Jatzo before they recommend it. Use the trial to decide how it fits your existing service.

Explore the live inbox demo ↗︎
  1. 01

    Try it on your own tenant.

    Request the free 30 day trial. Let your team check messages and inspect the evidence.

  2. 02

    Shape your service.

    Review partner terms, choose plans for your clients and decide how to package support and billing.

  3. 03

    Introduce it to clients.

    Set up separate client organisations and follow the central deployment guide. No MX change, transport rule or connector is required.

One line of support,
and it runs through you.

Your clients never receive a bill from us or a price we set, and they do not call us. Keeping that boundary is what lets you own the relationship.

YOU HOLD

The client,
and the first line.

  • The client relationship, and what you charge for it.
  • Billing your client.
  • First-line contact and day-to-day user support.
  • Password resets.
  • Adding and removing users.

JATZO HOLDS

The platform,
and your engineers.

  • The platform, its hosting and its backups.
  • Maintenance, updates and security patching.
  • New detection work as the attacks change.
  • Link and domain checks behind every result.
  • The evidence reports and the proof pack.
  • Support for your engineers, Monday to Friday.

We aim to answer your engineers within one working day. We do not take calls from your clients, so do not promise them our support.

Putting a new supplier
in front of a client.

The due diligence is yours to answer, and none of it needs drafting. Ask and you have it the same day.

  • A data processing agreementWritten, with the liability position set out rather than left to a conversation.
  • Insurance certificatesThe cover we carry, in writing.
  • A completed security questionnaireWhat is processed, what is kept and for how long, access control, encryption, and how untrusted content is handled.
  • The sub-processorsNamed, with what each one receives.

We hold no security certification and do not claim one. What is listed here is documentation, and it is current.

Good questions.
Straight answers.

Read the detail your engineers and clients will want to see.

Research ↗︎Security and privacy ↗︎Request due-diligence documents ↗︎
Does it replace our email security?

No. Jatzo checks the messages people choose to send it and supports existing controls and escalation processes. A low score does not guarantee that a message is safe.

Can we use our own brand?

The product is sold as Jatzo. Reports carrying your logo alongside Jatzo's are available on request and are currently produced by hand. Full white labelling is not offered.

Which clients and platforms are supported?

Each client’s plan has its own minimum: Business starts at 2 people and Business Pro at 5. Features also depend on the plan. The Outlook add-in runs on Windows, Mac, the web and mobile. Outlook mobile does not provide the internet headers needed for sender-authentication checks, so the result explains what could not be checked rather than scoring as though it had. Check current platform support before making commitments. The Gmail add-on installs from the Google Workspace Marketplace. It enrols a client's staff on its own once their domain is proved, and until then each person pastes a connection code once.

See current compatibility and setup ↗︎
How do the commercial terms work?

You buy at partner rates and Jatzo invoices you monthly, with a line for each client. The current partner rate, account requirements and terms are provided in the partner information.

Request the current partner information ↗︎

Try it. Question it.
See where it fits.

Thirty days free on your own tenant, before any client sees it. Put a real suspicious email through it and see exactly what your clients would see. Create an account, tell us the address, and we make it a partner account the same day. That last step is ours to do rather than self-service.

Request your 30 day MSP trial

Tell us your company and roughly how many clients you have in mind.

30days to exploreOn your own tenant