- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
INKY Email Security
A supplier’s logo, a QR code, an urgent invoice. Your staff shouldn’t have to guess — INKY Email Security checks mail for Microsoft 365 and Google Workspace from inline behind the platform, with no MX change, and writes a colour-coded banner into each risky message telling the reader why — in 30+ languages.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Kaseya platform family
This page covers INKY Email Security — the Advanced and Pro bundles, and the successor to Graphus at Kaseya, which INKY replaces. The rest:
Quick facts
30-second orientation- Product
- Inline email security for Microsoft 365 and Google Workspace, with coaching banners in the message
- Maker
- INKY Technology Corporation, founded 2008 by Dave Baggett; a Kaseya company since 7 October 2025
- Owner
- Kaseya, Miami; CEO Rania Succar since June 2025; Insight Partners is the majority owner
- Price
- Not published; quoted through Kaseya, standalone or inside Kaseya 365 User
- Bundles
- Advanced (inbound and internal) and Pro (adds GenAI, outbound DLP, encryption, DMARC)
- Deployment
- Connectors and mail-flow rules behind the platform; MX records stay with Microsoft or Google
- Set-up
- 20–30 minutes by INKY’s guide; Microsoft 365 auto-onboarding takes 10–15 minutes
- Replaces
- Graphus — end of sale 7 October 2025, end of life June 2027; three months’ overlap at no extra cost
- India
- No India data region is published for INKY; Kaseya has an office in Bangalore
- In India via
- TechBag — bundle choice, Graphus migration plan, quote with GST, pilot-group set-up
Understand inline email security before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is inline email security?
A service that sits behind your mail platform, checks each message, and tells the reader what looked wrong.
Platform filtering and yearly training vs INKY — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Platform filtering and yearly training | INKY Email Security |
|---|---|---|
| How it is switched on | Native filters, already in the tenant | Connectors and mail-flow rules; MX unchanged |
| What a user sees | Mail in the inbox or junk, no reason given | A colour-coded banner saying what looked wrong |
| Forged brands and QR codes | Text rules that cannot read an image | Computer vision on logos and QR codes |
| A colleague’s account taken over | Trusted, because the sender is internal | Sender profiling flags out-of-pattern internal mail |
| Phishing training | A course once a year | Coaching on live mail; BullPhish ID can follow up |
| What it is NOT | — | An archive, a continuity service or Teams cover |
The cheapest test is one pilot group: connect a tenant, run Journal Mode for a week, and read what INKY would have flagged.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Routing
A Microsoft 365 connector and transport rule, or a Google Workspace routing rule, sends mail through INKY’s smart host while MX records keep pointing at Microsoft or Google.
Analysis
Computer vision reads logos and QR codes, sender profiling and social graphs spot account takeover, and attachments get zero-day analysis; the Pro bundle adds GenAI intent reading.
Banners
A colour-coded banner written into the message explains why it was flagged, in 30+ languages and on any client without a plug-in; users can report phish and keep their own lists.
Console
One dashboard spans every client team, reached through KaseyaOne: VIP lists, allow and block lists, graymail and banner policy, and on Pro a SIEM event feed.
Mail-flow rules behind Microsoft 365 or Google — each message scored, then bannered for its reader, with MX left alone.
Nine capabilities. Detect, coach, control.
INKY checks every message behind your mail platform and tells the reader, inside the message, what looked wrong.
Sees forged brands
Looks at each message as a person would, catching lookalike logos, altered images and QR codes that text rules cannot read.
Spots account takeover
Sender profiling and social-graph anomalies flag a known contact who suddenly writes unlike themselves, inside or outside the firm.
Zero-day file checks
Advanced attachment analysis looks for zero-day malware in files, and links are checked again at the moment a user clicks them.
Advice inside the message
Colour-coded banners say why a message looks wrong, in 30+ languages, with no plug-in on desktop, web or mobile mail clients.
One-click phish reports
Users report suspect mail and keep personal allow and block lists, so fewer “is this safe?” questions reach the IT queue.
Hands off to BullPhish ID
INKY events can trigger BullPhish ID training for the person who nearly clicked, tying real mail to Kaseya’s awareness tool.
Bulk mail moved aside
Newsletters and low-priority bulk mail are routed out of the inbox to a place you choose, and are still scanned for threats.
Approval before it leaves
On Pro, DLP detection and dangerous-reply checks hold risky outgoing mail and start an approval inside the message itself.
Type [encrypt] to protect
On Pro, adding [encrypt] to the subject sends mail via the portal; recipients sign in with Microsoft, Google or a magic link.
Watch INKY in action
INKY’s 2025 platform overview, a 2023 tour, the graymail module and outbound approvals. All from INKY’s official channel, recorded before Kaseya bought INKY in October 2025.
INKY's Modern Email Security Platform Built for MSPs
The platform and its interactive Email Assistant banners, filmed four months before Kaseya bought INKY.
INKY EMAIL SECURITY PLATFORM
A 2023 tour of security, compliance and productivity features; the bundle names have changed since then.
INKY Graymail Protection Product Overview
How bulk mail is moved out of the inbox and still scanned; graymail is in both of today’s bundles.
Outbound Mail Protection by INKY Technology
The in-message approval flow for risky outgoing mail, which now sits in the Pro bundle.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Filters decide silently. INKY explains its decision to the person reading.
Here’s what genuinely sets it apart — and exactly where it stops.
No MX cut-over, no single point of failure
INKY joins Microsoft 365 or Google Workspace through connectors and mail-flow rules, so MX records stay where they are and there is no DNS wait. INKY’s guide says that if the service has a problem, mail bypasses it and is delivered as normal. A security group lets you start with a few pilot users.
Users are told why, in the message
Most filters quarantine silently or let mail through untouched. INKY writes a colour-coded banner into the message explaining what looked wrong, such as a lookalike domain, a forged logo or a first-time sender, in 30+ languages and on any client, so people learn from live mail.
Built for MSPs, now inside Kaseya 365 User
One multi-tenant dashboard covers every client. Since 1 January 2026 the Advanced bundle has been included in Kaseya 365 User, with Pro as an upgrade, and MSPs can mix Advanced and Pro across client organisations, though not within one domain. Graphus customers move to INKY.
Where it stops
There is no public price and no India data region on record. INKY lists no cover for Teams, Slack or SharePoint, and no archive or continuity service. GenAI intent analysis, outbound DLP and encryption are Pro only, and no analyst firm currently ranks INKY.
The numbers behind the platform
What your INKY rollout looks like
Choose the bundle and pilot users
Decide Advanced or Pro per client, list the VIPs to protect, and create an INKY-Users group with a few pilot users.
Connect and run Journal Mode
Run Microsoft 365 auto-onboarding or the Google routing rule, then let Journal Mode observe mail before INKY acts.
Tune lists and graymail
Add allow and block entries, choose where graymail lands, and read the daily digest so false positives surface early.
Widen protection
Move the rest of the staff into INKY-Users and use Message Trace to confirm mail routes through INKY and banners show.
Retire the old layer
Remove Graphus or legacy routing rules that could clash, and on Pro switch on outbound rules and encryption.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“We moved a 200-seat client onto INKY in an afternoon. MX never changed, so nobody needed a maintenance window.”
“The banners did what yearly training never did. Staff now ask why a supplier email was flagged instead of clicking it.”
“A forged courier logo with a QR code got past the native filter twice; INKY marked it as brand forgery both times.”
“Graymail filtering cleared the newsletter clutter for our partners. Far fewer people forward marketing mail to IT now.”
“We bought Pro for outbound DLP. The approval prompt inside the message is easier than the bounce-back our old tool sent.”
“Detection is good, but there is no price list, and the Graphus migration paperwork took longer than the technical move.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the email security market — tap any vendor to see why it sits where it does.
TechBag Email Security Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quoted; Advanced is bundled in Kaseya 365 User.
No-MX Deployment × User Coaching
The grid nobody publishes — how far a product avoids an MX cut-over vs how much it tells users, inside the message, about the risk.
Inline behind the platform; banners in 30+ languages.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
INKY Email Security vs the email security field
Against Abnormal Inbound Email Security, Check Point Harmony Email & Collaboration, Proofpoint Email Protection, Barracuda Email Protection and N-able Mail Assure — on deployment, detection, coaching, price, add-ons, support and India.
| Dimension | INKY Email Security | Abnormal Inbound Email Security | Check Point Harmony Email & Collaboration | Proofpoint Email Protection | Barracuda Email Protection | N-able Mail Assure |
|---|---|---|---|---|---|---|
| What it is | Inline email security | Behavioural API layer | API email + collab suite | Gateway plus AI layers | Tiered gateway suite | MSP filter and archive |
| Deployment | Inline, MX unchanged | API, after delivery | API, inline prevent mode | Gateway or API | MX, API, or both | MX gateway |
| Mail platforms | M365, Google Workspace | M365 and Google only | M365, Google + collab | Any host via MX | Any host; API for M365 | Any host by MX |
| Detection approach | Vision + behaviour | Behavioural AI | AI, sandboxing, DLP | Threat intel + AI | Gateway + impersonation | Pooled intelligence |
| User coaching | Banners, 30+ languages | Not the focus | No awareness SKU | Separate awareness SKU | Training in top tiers | Spam training only |
| Pricing model | Per licence, by bundle | Per user, annual | Per user, via partners | Per user, by suite | Per user, by tier | Quote, per client |
| Published entry price | Not published | ~$15–35/user/yr reported | ~$15–40/user/yr reported | From $2/user/month | $3–12/user/month | No list price |
| Included vs add-on | Pro adds DLP, GenAI | ATO is an add-on | Collab apps in policy | Suite pieces add up | Tier-gated modules | Archive + continuity |
| Outbound and encryption | Pro only | Inbound-focused | DLP and encryption | DLP lineage | Outbound + DMARC | Outbound filtering |
| Admin and multi-tenancy | Multi-tenant dashboard | Enterprise console | Infinity Platform | Channel or enterprise | MSP-friendly | One console, all clients |
| India data region | None published | Not documented | Not stated | Mumbai data centre | No India DC listed | Not on record |
| Support | Kaseya, 24/7 | Terms in contract | Check Point + partners | Partner, then vendor | Partner-led | N-able direct |
| Lock-in and exit | Delete the rules | Revoke API access | Disconnect the API | MX cut-back | MX and API to undo | Archive to migrate |
| Best fit | MSPs and Kaseya shops | Payload-less fraud | Mail plus collab apps | Regulated enterprises | Value suite + training | MSPs needing archives |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose INKY if…
- ✓You manage many Microsoft 365 or Google Workspace tenants and want filtering live within an hour without moving MX
- ✓You want users coached by a banner in the message itself, in their own language, rather than mail vanishing into quarantine
- ✓You already buy Kaseya 365 User, or run Graphus, which INKY replaces before Graphus reaches end of life in June 2027
Compare alternatives if…
- ✓You need Teams, SharePoint or Slack covered too — Check Point Harmony Email & Collaboration puts them in one policy
- ✓You need archiving and continuity in the same product — N-able Mail Assure includes both
- ✓You need an India data centre on paper — Proofpoint documents one in Mumbai
Do not expect…
- ✓A published price; both bundles and Kaseya 365 User are quoted
- ✓GenAI intent analysis, outbound DLP or encryption on the Advanced bundle
- ✓An analyst ranking — no firm currently places INKY
INKY Email Security is one of 30 email security products TechBag carries. The Email Security guide narrows them to a shortlist and shows the reasoning. →
What does phishing triage cost you?
Drag the sliders (users you protect; IT staff-hour cost). Estimates model the staff time spent answering “is this safe?” questions, releasing false positives and cleaning up after clicked phishing, at an assumed 1.5 hours per user a year, with 70% of it saved by in-message banners and inline filtering. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote only. Kaseya publishes no price for INKY Advanced or INKY Pro, and Kaseya 365 User, which has included Advanced since 1 January 2026, is quoted too, with a 50-licence minimum for new customers. Graphus customers who migrate keep their Graphus pricing until their term ends, then pay the INKY list price. TechBag counts the users you protect per client first, then gets the quote itemised with GST.
INKY Advanced
Best for inbound and internal protection
- Computer vision, QR and lookalike checks
- Banners, graymail, signatures, phish reports
- Included in Kaseya 365 User; quoted alone
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
INKY Pro
Best for teams that need outbound DLP
- Adds GenAI intent analysis
- Outbound DLP, approvals and encryption
- DMARC monitoring and a SIEM event feed
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Is every tenant on Microsoft 365 or Google Workspace? Those are the two platforms INKY’s pages cover.
Do you need outbound DLP, encryption, DMARC monitoring or GenAI intent analysis? Those need Pro, not Advanced.
Do you already pay for Kaseya 365 User? Advanced has been included since 1 January 2026; Pro is an upgrade.
Running Graphus? Plan the move to INKY before end of support in December 2026; the three-month overlap is free.
Is Mimecast, Proofpoint or Barracuda already in front of the tenant? Set it as INKY’s upstream provider, or retire it.
Where are messages scanned and stored? No India region is published, so get the answer in writing for DPDP.
Do Teams, SharePoint or Slack carry the same risk? INKY lists no cover for them; price a second tool if they do.
Does the quote state the bundle, licence count, term and renewal terms for each client, with GST shown?
Questions buyers ask
Ready to evaluate INKY Email Security?
Count the users you protect per client first, or let a TechBag advisor choose Advanced or Pro, plan the migration off Graphus and get the quote itemised with GST.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.