Backups & restore Coming soon
Daily encrypted backups of Exchange Online and Gmail mailboxes, stored outside Microsoft and Google with immutability.
For Microsoft 365 & Google Workspace
KnoxDefender keeps an independent, encrypted copy of your mailboxes, catches phishing and payment fraud, and stops criminals from spoofing your domain. We run it for you as a managed service built for nonprofits and small teams.
Microsoft and Google make sure the service is up. But when someone deletes a folder by mistake, a departing employee wipes their mailbox, or an attacker takes over an account and starts sending fake invoices to your donors, recovering and containing it is largely your responsibility. KnoxDefender is built for exactly those days.
Six capabilities, sold as three simple plans. Each shows its real availability.
Daily encrypted backups of Exchange Online and Gmail mailboxes, stored outside Microsoft and Google with immutability.
Detects phishing, business email compromise and malicious attachments or links after delivery, without changing MX records.
SPF, DKIM and DMARC monitoring with DMARC report ingestion and plain-English fixes.
Watches for signs of mailbox takeover: forwarding rules, delegation changes, risky app access and suspicious deletions.
Searchable retained email with legal holds, exports and former-employee preservation.
Authorized phishing simulations and short lessons written for nonprofits and small teams.
Your Microsoft 365 or Google Workspace administrator approves KnoxDefender with the official consent screen. We request only the permissions each feature needs and explain each one.
Pick the mailboxes to back up and assign each person their own mailbox so they can see its status and request restores.
Dashboards show backup freshness, restore-test results, threats and domain health, with plain-English explanations and a monthly report for your board.
Staff find the messages they need in their own backups and send a request. Your administrator sees exactly which messages, from which point in time, going where, and approves or rejects it. Approval locks the request, and every step lands in a tamper-evident audit trail.
How restore requests work →Donor data, grant agreements and payment instructions all live in email. KnoxDefender is priced and explained for small teams without a security department.
They keep their service running and offer short-term recovery of deleted items, but long-term, point-in-time recovery of what your people deleted, overwrote or lost to an attacker is largely the customer's responsibility. KnoxDefender keeps an independent, encrypted copy outside Microsoft and Google.
No. KnoxDefender connects through the official Microsoft 365 and Google Workspace APIs with administrator consent. Your mail flow stays exactly as it is.
Your organization's administrators, within the permissions you set. Staff see only their own mailbox. KnoxDefender personnel cannot open message content by default; support access needs a recorded reason, a fresh two-step check, is time-limited and appears in your audit log.
Staff can find messages in their own backups and request a restore. An administrator in your organization reviews the exact messages and approves it. Restored messages go to a new "Recovered" folder; nothing is overwritten.
A mailbox only counts as Protected when backups are current and a test restore has verified it. Until then it shows as Backed up, Needs attention or Unknown, never as protected.
Your retained backups stay under their retention period and any legal holds, and administrators can export them. Ending the service never silently deletes retained email.
Tell us how many mailboxes you have. We reply with a clear quote, including any nonprofit pricing.
Get a quote