Workspace Protection
on an Email Security
Budget

Stop attacks, secure sensitive data, manage connected apps, and strengthen security posture across Google Workspace & Microsoft 365.

Essentials

Best for teams that need to automate email security plus understand and fix file sharing, connected app inventory, and risky account settings.

$4 Per user/month,
billed annually

Plus fee based on Shared Drive size

Get started

Wrap your arms around cloud workspace security:

  • Automated inbound email threat detection and response
  • Automated agent for user-reported phishing
  • Inventory of connected OAuth apps
  • Detect, monitor, and control files in Shared Drives (metadata)
  • Posture management and vulnerability reduction across the cloud workspace

Advanced

Best for teams that need email security, scaling connected app security, while also locating and protecting sensitive content across the cloud workspace.

$6 Per user/month,
billed annually

Plus fee based on Shared Drive size

Get started

Everything in Essentials, plus:

  • Automated agent to investigate, classify, and remediate OAuth grants
  • Detect, monitor, and control sensitive content in Shared Drives and email
  • Find and fix anomalous behavior related to sensitive content in files and emails
  • Enhanced identity risk and threat detections

ATO Resilience

Enhance your security with advanced features that reduce the impact of account takeovers and speed investigation and reporting. This functionality is available as an add-on or a stand-alone license.

+$3 Per user/month,
billed annually

$5/user/month as a stand-alone

Get started

Comprehensive coverage purpose-built for one of the most common threats to your organization:

  • Contain the blast radius of ATOs with message-level controls for sensitive content, password resets, and more
  • Prevent lateral movement by identifying and protecting password reset emails and magic links
  • Accelerate incident response with auto-generated audit logs

Enterprise

Discounts available at scale

Talk to Sales

Built for your workspace.
Priced for your team.

Capability
Essentials$4 /month
Get started
Advanced$6 /month
Get started
Stop sophisticated email attacks (Phishing, BEC, Impersonation, Fraud, etc.)
Remediate email attacks with flexible remediations (banners, link/attachment speedbumps, marking spam and deletion)
Automate user-reported phishing response
Detect and remediate email bomb and harassment campaigns
Hunt for email threats and build custom detections
Train employees to recognize the latest email attack types (speedbumps, simulations, reporter acknowledgement)
Reporting (trends, detections, user reports)
Dynamic inventory of OAuth grants, including scopes and users
Agentic investigation of new OAuth grants
Agentic remediation of malicious OAuth grants
Automatically notify users of suspicious and malicious OAuth grants
Recurring audit and re-investigation of OAuth grants
Sync files from MyDrives and Shared Drives and ingest Google Drive labelsMetadata onlyMetadata and
Content
Detect files with risky or improper sharing
Detect external applications with excessive file access
Detect orphaned file sharing from offboarded accounts
Remediate file issues with user notifications, permissions updates, and label assignments
Detect and monitor sensitive data types in file content
Define custom sensitive data types
Detect auto-forwarding rules and manual forwarding to internal, external and personal accounts
Detect external applications with excessive email access
Create custom detections to monitor email traffic
Detect and monitor built-in and custom sensitive data types in email
Detect anomalous and high volume sensitive content sharing via email
Identify areas of risk (MFA gaps/bypasses, inactive accounts, mail forwarding, account/admin activity)
Detect and mitigate account takeovers (ATO) based on account activity
Detect credential sprawl and unsanctioned app signups
Detect SSO gaps and email-based password resets
RBAC
Event Subscriptions and API
MCP Server
Capability
ATO Resilience+$3 /month
Get started
Prevent post-breach data loss with message-level MFA for accessing historical sensitive email
Prevent post-breach lateral movement with message-level MFA for accessing password reset and other identity verification emails
Categorize all sensitive data at rest in mailboxes
Detect credential sprawl and unsanctioned app signups
Detect suspicious mail forwarding rules
Detect and mitigate account takeovers (ATO) based on account activity
Detect account takeovers (ATO) based on sensitive content honeypots
Detect and audit historical sensitive emails
Detect and monitor sensitive data types in email
Ingest custom sensitive data types from Microsoft Purview
Detect MFA coverage gaps including use of non phishing-resistant MFA
Detect and remediate IMAP/POP, ASPs, and other forms of MFA bypass
Detect leaked credentials in public data breaches
Detect SSO gaps and email-based password resets
Email content retentionUnlimited
Search across metadata and content for email and files
Follow investigations across accounts, groups, and tenants
Reports and dashboards
RBAC
Event Subscriptions and API
MCP Server

Trusted by today's most innovative companies

Mars NBCUniversal MassMutual Reddit OpenAI Anthropic xAI Omada Health Duolingo
Figma Datadog GitLab Sierra Surge AI Twilio Robinhood Lyft Oscar Health

Frequently Asked Questions

Find answers to common questions and get the details you need.

Yes - Contact us for details.

At Material, we are one of very few cybersecurity SaaS providers who offer both shared (multi-tenant) and dedicated (single-tenant) deployment options. Both options provide robust security and reliability, and each has its own unique advantages and may be better suited for different organizations depending on their specific needs and preferences.

Shared Architecture:

  • Cost effective and scalable solution for organizations of all sizes
  • Centralized management and updates for improved efficiency
  • The default deployment option for most organizations

Dedicated Architecture:

  • Single-tenant infrastructure offering complete isolation within a dedicated cloud project
  • Enhanced control over environment, with option for semi- or customer-managed instance
  • Ideal for organizations handling exceedingly large volumes of sensitive data or with very strict regulatory requirements

Material Essentials and Advanced packages support standard, shared, service, and low volume accounts. Contact us to discuss how pricing differs for these.

There is a minimum annual cost that covers up to 1TB of Shared Drive storage. The Material team will work with you to understand the size of your Shared Drives and the associated costs.

Get a demo

See the Material difference for yourself

Book a demo
New