Problem it solves
Targeted phishing and BEC attacks evade traditional filters and exploit user trust.
⌘K
Product
GravityZone Extended Email Security
Protect email from a unified security platform: an MX gateway and API-based mailbox protection in a single solution.
Email Security
Close the Email Exposure Gap
Email remains the fastest route for attackers. 66% of security leaders reported more BEC attacks last year, according to Bitdefender's 2025 IT Security Assessment Report, and traditional gateways cannot keep up.
GravityZone Extended Email Security delivers Integrated Cloud Email Security (ICES): it joins MX-based perimeter protection with mailbox-level detection through the Microsoft API to block, detect and remediate.
Key Features
Key Capabilities
Two Layers of Protection
Blocks threats before delivery and monitors mailboxes to detect and contain evasive attacks that get past the perimeter.
Email Authentication
Enforcing DMARC, DKIM and SPF protects domain reputation and prevents impersonation attacks.
Outbound Mail and Graymail
Protects outbound email and filters graymail to prevent data leaks, protect sender reputation and cut inbox clutter.
Risk-Based Policies
Tune policies by role, exposure and business impact, with stricter controls for executives or finance teams.
TLS Encryption
STARTTLS with TLS enforcement enables secure, encrypted message delivery between mail servers.
Self-Service Quarantine
The quarantine digest lets users release messages while administrators keep full control through policy-based permissions.
Prevention and Detection
Threats blocked before and after delivery
A unified approach closes visibility gaps and shortens attacker dwell time, backed by threat intelligence from Bitdefender Labs.
- Block threats before they reach users.
- Detect and deal with advanced threats that bypass the initial filters.
- Quickly remove malicious messages from all inboxes.
Simpler Operations
Deploy in minutes with native Microsoft 365 integration
Built for Microsoft 365 and hybrid infrastructures, it is cloud native and works through API.
- Deployment in minutes, with no MX record changes when deployed by API.
- Automatic mailbox synchronization through Azure AD to reduce administrative overhead.
- Real-time visibility of email risk across the organization, by user and domain.
- Deploy as SEG, API protection or both, and apply controls by domain, department or user.
Use Cases
Practical Applications
Stop Phishing and BEC
Detects targeted, evasive phishing and business email compromise attacks that get around traditional filters.
Protect Executives and Finance
Apply stricter controls where risk is highest, by domain, department or user, without adding friction for the rest of the organization.
Key Benefits for Your Organization
Why choose Extended Email Security?
One Platform
Email telemetry feeds GravityZone prevention, detection and response, which removes siloed tools.
Faster Response
Speeds up investigations and incident response and reduces operational complexity and tool sprawl.
Lower Total Cost
Lowers total cost of ownership by consolidating email security into the GravityZone platform.
Measurable Results
66%
Of security leaders reported more BEC attacks last year
250+
Unique filters applied to every email processed
API
Deployment in minutes, no MX record changes
M365
Native Microsoft 365 integration
Integrations
Unified GravityZone Platform
GravityZone EDR Cloud
GravityZone XDR
GravityZone PHASR
GravityZone EASM
GravityZone Compliance Manager
GravityZone Security Data Lake
Technical guide for choosing the solution
When should you add Extended Email Security?
If your email already goes through a filter but phishing and BEC attacks still get in, two-layer protection adds in-mailbox detection and remediation across all inboxes.
What it includes
MX gateway, API protection, DMARC, DKIM and SPF authentication, TLS encryption, self-service quarantine and risk-based policies.
Best for
Organizations on Microsoft 365 or hybrid infrastructure that want fewer siloed tools and faster response.
How TUTARI implements it
We choose the deployment model, synchronize mailboxes and tune policies by domain, department and user.
Commercial coverage in Costa Rica and Mexico
We serve companies with local contact, remote or onsite delivery, and the same service standard in both countries.
Costa Rica
In Costa Rica we connect GravityZone Extended Email Security to your Microsoft 365 environment, decide whether to run it as a gateway, by API or both, and configure policies by domain and by user. Support is handled in Spanish and in local hours.
Request assessmentMexico
In Mexico we deploy GravityZone Extended Email Security from Mexico City: mailbox synchronization, policies for higher-risk areas such as finance and leadership, and support for your IT team. Support is handled in Spanish and in your own time zone.
Request assessmentWhat is GravityZone Extended Email Security and how does it differ from a traditional gateway?
TUTARI S.A. — Bitdefender Partner
GravityZone Extended Email Security is a Bitdefender ICES (Integrated Cloud Email Security) solution. It combines secure email gateway controls, based on MX, with Microsoft mailbox protection through API, so threats are blocked before delivery and keep being watched once inside the mailbox.
Modern attacks exploit identity, trust and user behavior, so perimeter filtering alone is not enough. API monitoring stays active inside the mailbox, detects threats after delivery and remediates them, backed by threat intelligence from Bitdefender Labs.
TUTARI defines the deployment model, connects the Microsoft 365 tenant, enables DMARC, DKIM and SPF authentication and configures risk-based policies, so email stays protected without adding friction for users.
Frequently Asked Questions about Bitdefender GravityZone
Answers to the most common questions about our services
Request Information
What does ICES mean?
Integrated Cloud Email Security: protection that joins MX-based perimeter filtering with in-mailbox detection through API in a single solution.
Do I need to change MX records?
Not with API deployment, which takes minutes even if a secure email gateway is already in place. If you choose perimeter protection, mail flows through the MX-based gateway; you can also combine both.
Does it work with Microsoft 365?
Yes. It is built for Microsoft 365 and hybrid infrastructures, with automatic mailbox inventory sync through Azure AD and fast provisioning.
What happens to malicious messages already delivered?
API-based protection continuously monitors email after delivery and detects and remediates threats that passed the perimeter; it does not filter before they reach the user, which is the MX gateway's job. It also lets you quickly remove malicious messages from every inbox.
What license do I need?
Extended Email Security is an add-on that requires a base license: Business Security, Business Security Premium, Business Security Enterprise, GravityZone EDR Cloud, Bitdefender MDR licenses or GravityZone Cloud MSP Security.
How does TUTARI help with Extended Email Security?
TUTARI, a Bitdefender partner, defines the deployment model, connects Microsoft 365, configures policies and provides Spanish-language support in Costa Rica and Mexico.
Simplify your email security
Talk to a TUTARI expert about GravityZone Extended Email Security.
Consult with Experts
