Start for Free

Your defense against
email threats

AI-powered email security that gives you
confidence in every click.
Start for Free

The attacks that look like normal work

A payment request that looks routine.

Your CEO’s name, or a supplier’s invoice with new bank details. No link and no attachment, so a spam filter has nothing to catch.

$123,000 lost on average per reported case of this fraud in the US in 2025.FBI Internet Crime Report 2025 ↗

DP

Dana PriceCEO

dana.price@northwind-c0rp.com

Wire before 3pm - keep this between us

I'm in meetings all day. Send $48,200 to the account below and confirm.

Lookalike domain

Business email compromise

Moved out of the inbox

A sign-in page that isn’t Microsoft or Google.

It looks exactly like the real one. One typed password opens the mailbox and everything connected to it.

1 in 6 data breaches started with a phishing email.Verizon Data Breach Investigations Report 2026 ↗

M

Microsoft 365

[email protected]

Your password expires today

Keep your current password to avoid losing access to email and files.

Keep my password
https://login-micros0ft-online.support/auth
Fake sign-in page

Credential phishing

Moved out of the inbox

A phishing email from a colleague’s real account.

Once one mailbox is taken over, the next email comes from inside the company, where most filters never look.

62% of data breaches involved a person: a click, a mistake or a trick.Verizon Data Breach Investigations Report 2026 ↗

AK

Alex KimYour colleague

[email protected]

Re: Q3 budget - updated file before the call

Here's the latest version, can you check the numbers?

Q3-budget-final.xlsx · share-docs-portal.net
Internal sender, outside link

Credential phishing

Moved out of the inbox

Hours spent asking “is this real?”

People stop work to forward it, IT checks it by hand and then hunts for the same email in every inbox.

Over a third of IT and security working hours go to dealing with phishing.Osterman Research, The Business Cost of Phishing 2026 ↗

One suspicious email, Monday morning

  1. 9:12SOSam forwards it to IT: “Is this real?”
  2. 9:26PRPriya got the same email
  3. 9:48ITIT checks the sender and the link
  4. 10:15ITIT searches every inbox for copies
  5. 10:40ITIT to everyone: “Please delete it”
1 h 28 min of interruptions

With Zoes: gone at 9:12

Out of every inbox before anyone asks

Multi-layered protection powered by AI

Inbox
PS

Priya Shah

Q3 planning notes

ST

Stripe

Your receipt from Acme

ML

Marcus Lee

Lunch Thursday?

Connects to your inbox

Checks new mail in Gmail or Microsoft 365 as it arrives. No mail rerouting, nothing to install.

NS
Sender Links Attachments Wording

Checks everything at once

The sender, the links, the attachments, and the wording - scanned together, automatically.

AKAlex
Q3 budget.xlsx
Checked
SRSam

Checks internal mail too

Email between colleagues is checked as well, so one hijacked account can’t quietly phish the rest of the team.

Dana Price

Wire before 3pm

Moved out

Win a prize

You have been selected

Spam

Weekly digest

Top stories this week

Promotions

Takes action automatically

Dangerous and suspicious mail is moved out of the inbox. Spam and newsletters are sorted out of the way.

Next-Gen security in 3 steps

A simple flow to protect you from email threats

Authorize Zoes

  • Read incoming mail
  • Move dangerous mail
Authorize
Connected
1

Authorize once

An admin authorizes Zoes once in Google Workspace or Microsoft 365. No mail rerouting, nothing to install.

First scan

2,418

emails checked

23

threats found

Invoice fraud
2

Get your first report

A scan of recent mail shows what has already slipped into your inboxes.

Credential phishing

Moved out of the inbox

just now

Invoice fraud

Moved out of the inbox

2h ago

Business email compromise

Moved out of the inbox

yesterday
3

Stay protected

Dangerous mail is moved out of the inbox automatically, and you get an alert.

Connected in minutes

  1. 1Sign in with Google

    Use your Google Workspace account.

  2. 2Authorize in the Admin Console

    A super admin adds the Zoes Client ID and scopes under Domain-wide delegation, then clicks Authorize.

  3. 3Protection starts

    Zoes notices the authorization by itself and starts checking your mailboxes.

What happens to your email

Incidents

Updated bank details

Phishing

Copy kept

Your password expires today

Phishing

Copy kept

Final notice: claim your prize

Spam

Copy kept

Lunch on Thursday?

Likely safe

Verdict only

Used to improve detection · kept up to 12 months

Flagged email is kept to learn from.A copy of every email Zoes flags, and every one an admin corrects, so detection keeps getting better.

The email

ML

Marcus Lee

[email protected]

Lunch on Thursday?

Booked a table for 12:30 at the place near the office. Let me know if that works for you.

menu.pdf · 84 KB

Safe email isn't kept.Zoes keeps the verdict and why, with sender and subject as hashes. A picture of the email stays 7 days for review.

Admin console · API access

Zoes Security

Has access

Read mail
Move mail
Read your user list

Yours to switch off.Remove Zoes in your Google or Microsoft admin console and its access ends.

How we protect data →

Works with the tools you already use

Microsoft Teams

Protects Google Workspace and Microsoft 365. Alerts in Slack, Microsoft Teams, Telegram and email.

How Zoes compares

ZoesStart for Free

Typical email security tools

Setup
One admin approval, minutes
MX change or a sales-led rollout
Mail delivery
Unchanged, mail is checked after it arrives
Often rerouted through the vendor
Policies to configure
None
Usually several
Internal email
Checked too
Not seen by email gateways
First result
A scan of mail already in your inboxes
Usually new mail only
Price
$49/mo for up to 10 mailboxes
Usually quoted after a sales call
Trial
14 days, no sales call
Usually a demo first
Contract
Yearly at a published price, after the free trial
Annual, negotiated with sales
Removing it
One switch in your admin console
Undo the MX change, wait out the contract
Google Workspace and Microsoft 365
Varies
Zoes vs. Defender, Abnormal, Proofpoint, Mimecast and more →
Vladimir Culic, Founder & CEO of Zoes Security

“I started Zoes because every company, from five people to five hundred, deserves serious email protection. Not after a sales call or a long rollout, but today, in a few minutes.”

Vladimir CulicFounder & CEO, Zoes Security[email protected]

From the blog

All posts →
Four coworkers looking at a laptop together at a table

October 14, 2026 · 6 min read

Phishing protection for a small business: a setup checklist

A person holding a payment card while typing on a laptop

October 14, 2026 · 6 min read

Business email compromise: how it works and how to stop it

Hands typing on a laptop at a desk

October 14, 2026 · 5 min read

Email security for Google Workspace

Frequently asked questions

Yes, both. An admin connects your organization once and every protected mailbox is covered.

No. Zoes reads mail through the Google and Microsoft APIs after it arrives - no MX records, no mail routing changes, nothing to install.

Zoes reads each email to check it. For email it judges likely safe, only the verdict and its signals are kept, with sender and subject stored as hashes. A copy of every email Zoes flags, and of every email an admin corrects, is kept for up to 12 months to improve detection. A picture of each email is kept for 7 days so an admin can review it.

Yes. Every paid plan starts with a 14-day trial; cancel before it ends and nothing is charged. Teams of up to 4 people can use a limited free plan.

By the number of mailboxes you protect, billed yearly; monthly billing is coming soon. In US dollars, $49 a month covers up to 10, then $7 a mailbox to 50 and $5 above - with no upper limit. A year costs ten months instead of twelve.

By email on every plan, and in Slack, Microsoft Teams or Telegram on paid plans.

See what is getting into your team's inboxes.

Set up in minutes. Try it free for 14 days.

Start for FreeView pricing