For Microsoft 365 & Google Workspace

Your email, backed up and protected, without the enterprise price tag.

KnoxDefender keeps an independent, encrypted copy of your mailboxes, catches phishing and payment fraud, and stops criminals from spoofing your domain. We run it for you as a managed service built for nonprofits and small teams.

  • Encrypted with a key per organization
  • Two-step sign-in for everyone
  • Tamper-evident audit trail
Mailbox protectionIllustration
Executive DirectorProtected
FinanceProtected
Programs (shared)Backed up
Volunteer deskNeeds attention
"Protected" means a test restore succeeded, not just that a backup ran.

Your provider keeps email running. Getting it back is on you.

Microsoft and Google make sure the service is up. But when someone deletes a folder by mistake, a departing employee wipes their mailbox, or an attacker takes over an account and starts sending fake invoices to your donors, recovering and containing it is largely your responsibility. KnoxDefender is built for exactly those days.

Everything email, in one place

Six capabilities, sold as three simple plans. Each shows its real availability.

Backups & restore Coming soon

Daily encrypted backups of Exchange Online and Gmail mailboxes, stored outside Microsoft and Google with immutability.

Email security Coming soon

Detects phishing, business email compromise and malicious attachments or links after delivery, without changing MX records.

Domain health Available

SPF, DKIM and DMARC monitoring with DMARC report ingestion and plain-English fixes.

Mailbox security Coming soon

Watches for signs of mailbox takeover: forwarding rules, delegation changes, risky app access and suspicious deletions.

Archive Coming soon

Searchable retained email with legal holds, exports and former-employee preservation.

Awareness Available

Authorized phishing simulations and short lessons written for nonprofits and small teams.

How it works

  1. 1

    Connect

    Your Microsoft 365 or Google Workspace administrator approves KnoxDefender with the official consent screen. We request only the permissions each feature needs and explain each one.

  2. 2

    Choose what to protect

    Pick the mailboxes to back up and assign each person their own mailbox so they can see its status and request restores.

  3. 3

    See the evidence

    Dashboards show backup freshness, restore-test results, threats and domain health, with plain-English explanations and a monthly report for your board.

Restores with a second pair of eyes

Staff find the messages they need in their own backups and send a request. Your administrator sees exactly which messages, from which point in time, going where, and approves or rejects it. Approval locks the request, and every step lands in a tamper-evident audit trail.

How restore requests work →
1Requested by staff
2Reviewed by your admin
3Approved (locked)
4Restored to a "Recovered" folder

Built with nonprofits in mind

Donor data, grant agreements and payment instructions all live in email. KnoxDefender is priced and explained for small teams without a security department.

For nonprofits

Questions

Doesn't Microsoft or Google already back up my email?

They keep their service running and offer short-term recovery of deleted items, but long-term, point-in-time recovery of what your people deleted, overwrote or lost to an attacker is largely the customer's responsibility. KnoxDefender keeps an independent, encrypted copy outside Microsoft and Google.

Do you change our MX records or email routing?

No. KnoxDefender connects through the official Microsoft 365 and Google Workspace APIs with administrator consent. Your mail flow stays exactly as it is.

Who can see our email?

Your organization's administrators, within the permissions you set. Staff see only their own mailbox. KnoxDefender personnel cannot open message content by default; support access needs a recorded reason, a fresh two-step check, is time-limited and appears in your audit log.

Can staff restore their own email?

Staff can find messages in their own backups and request a restore. An administrator in your organization reviews the exact messages and approves it. Restored messages go to a new "Recovered" folder; nothing is overwritten.

How do we know backups actually work?

A mailbox only counts as Protected when backups are current and a test restore has verified it. Until then it shows as Backed up, Needs attention or Unknown, never as protected.

What happens if we leave?

Your retained backups stay under their retention period and any legal holds, and administrators can export them. Ending the service never silently deletes retained email.

Find out what protecting your email would cost

Tell us how many mailboxes you have. We reply with a clear quote, including any nonprofit pricing.

Get a quote