Email and Identity Protection

91% of attacks start with a phishing email or stolen credentials. Stopping that first click – or blocking the unauthorised sign-in that follows – eliminates most breaches before they begin. Our service combines inline cloud-email defence, strong multi-factor authentication (MFA) and real-time identity analytics so your staff can work anywhere without opening the door to attackers.

Advanced Email Security

AI Based Email Security

Office 365 inline scanning powered by next-gen AI engines.

Every Microsoft 365 workload that can carry sensitive data or malicious content is protected - not just the mailbox.

Exchange Online

  • Real-time phishing, BEC and malware blocking before messages hit the inbox
  • URL rewriting and time-of-click analysis to neutralise weaponised links
  • One-click user reporting that triggers auto-remediation and user coaching

Groups & Planner

  • Inspects attachments, comments and task notes for sensitive data leaks
  • Applies your DLP rules uniformly across collaboration containers

Teams Chat & Channels

  • Scans chat messages, GIFs and file uploads for malicious links or payloads
  • Quarantines risky content and alerts the sender - stopping “east-west” spread

Public Links & Guest Shares

  • Automatically revokes or downgrades sharing rights when content breaches policy
  • Notifies the file owner and logs evidence for compliance review

OneDrive & SharePoint Online

  • Continuous file-at-rest and file-in-motion scanning using sandbox and AI heuristics
  • Blocks ransomware-laden or policy-violating files before users sync or share them

Avanan Email Security Dashboard

Avanan provides real-time visibility into every email threat across Microsoft 365 - from phishing and malware to data loss prevention.

Layer3 integrates Avanan’s AI-driven analysis with our Cloud SIEM to deliver immediate detection, automated remediation, and complete incident oversight.

Every message is inspected, logged, and traced - giving your organisation total confidence in email security and compliance.

Advanced Email Security Features

AI-Driven Threat Detection

Deep learning models analyse behaviour, message content, and identity patterns to stop phishing, spoofing, and business email compromise

Zero-Hour Auto-Remediation (Z-HAR)

If a threat is found post-delivery, Avanan instantly retracts it from every inbox and chat thread

Inline Encryption & DLP

Automatically encrypts or blocks sensitive outbound content such as NZ IRD, health, or financial identifiers to protect data integrity

Impersonation & VIP Protection

Advanced header analysis detect brand spoofing and impersonation even when SPF, DKIM, and DMARC all pass.

SIEM & SOAR Integration

Real-time log streaming into Layer3’s Cloud SIEM enables automated playbooks for actions like user isolation, MFA resets

Policy-Based Isolation & Reporting

Simplified, secure user access through integrated 2FA and SSO management.

Comprehensive Reporting

Custom dashboards, documentation, and analytics give you full visibility of your IT environment and support activity.

User Enablement

Onsite training, awareness programs, and collaboration workshops empower staff to use technology safely and effectively.

Multifactor Authentication

Identity & Access Control

Strong sign-ins, adaptive policies, and continuous monitoring across Microsoft 365 and other single-sign-on (SSO) enabled applications.

Always-verified Sign-ins (Mfa Everywhere)

Push, and TOTP are required on every cloud and on-prem app - no exceptions.

Just-in-time Admin Rights

Privileged Identity Management grants time-boxed roles with MFA and auto-expiry.

Adaptive Conditional Access

Location, device health and user-risk scores decide who gets in and what they can do.

Risk-based Session Monitoring

Impossible travel, TOR exit nodes or token theft force MFA re-prompt or block the sign-in.

Passwordless, Phish-resistant Login

Windows Hello and FIDO2 keys remove shared or weak passwords from the equation.

Inforcer Drift Guard

Hourly snapshots re-apply MFA, CA and PIM settings if someone weakens a policy.

Security Awareness Training

User Security Awareness

Even the best technical controls can be bypassed by a single click. Our security awareness programme turns staff into a strong last line of defence with bite-sized training, realistic phishing simulations and risk analytics that improve automatically over time.

Automated Micro-learning Nudges

Sixty-second lessons drop into a user’s inbox the moment they trigger - or nearly trigger - a phishing threat.

Policy Acknowledgement Tracking

Captures e-signatures on key security and acceptable-use policies; evidence stored for audits.

Realistic Phishing Simulations

Campaigns mirror current attacker tactics; difficulty adapts to each user’s performance.

Dark-web Breach Alerts

Notifies users and IT when corporate or personal credentials appear in fresh breach dumps.

Personal Risk-score Dashboard

Every employee sees their own score and recommended actions; managers view team roll-ups.

Phishing Simulation & Human Risk Management

We turn your people into your strongest line of defence. usecure’s phishing simulation technology tests real-world attack scenarios to identify vulnerable users, measure response rates, and track improvement over time.

By simulating realistic phishing attempts across your organisation, we uncover behavioural risks before attackers do. Automated reporting highlights users and departments needing extra training, while integration with awareness modules ensures continual learning and measurable progress.

Insight-driven training. Reduced click rates. Stronger security culture.

Adaptive Training & Behavioural Intelligence

We take a personalised approach to security awareness. Each user’s training journey adapts based on their phishing performance, behaviour, and risk score. High-risk users receive targeted simulations and micro-learning modules, while confident users progress through advanced topics for continual improvement.

By aligning training to actual user performance, we reduce click rates, close human-risk gaps, and strengthen your overall security culture. Real-time dashboards provide visibility into improvement trends, helping you measure engagement and maturity across your organisation.

Targeted learning. Measurable growth. Proven resilience.
Layer3 Logo
Layer3 is an ISO 27001 certified MSP in Wellington with offices across New Zealand. Get strategy-first IT, security and managed support from Layer3.
ADDRESS
Level 2 CBD Towers 84-90 Main Street Upper Hutt Wellington, 5018 New Zealand
© 2025 Copyright Layer3.
Layer3 is a Silver Microsoft partner as well as an Authorised SPLA partner.