[{"data":1,"prerenderedAt":773},["ShallowReactive",2],{"money-live:best":3,"money:best:email-security-for-nonprofits":4,"money-links:\u002Fen\u002Fbest\u002Femail-security-for-nonprofits":747},true,{"page":5},{"family":6,"bestCategory":7,"slug":8,"navLabel":9,"hubBlurb":10,"icon":11,"eyebrow":12,"h1":13,"lede":14,"seoTitle":15,"seoDescription":16,"reviewed":17,"heroChips":18,"schema":23,"about":24,"mentions":28,"sections":49,"faqs":606,"sources":631,"disclaimer":724,"related":725,"cta":744},"best","segments","email-security-for-nonprofits","Best email security for nonprofits","Ten email security options ranked for foundations, charities and NGOs: cost, zero-IT setup and donor and grant fraud.","hand-heart","Best tools · Nonprofits","The 10 best email security tools for nonprofits (2026)","The best email security for nonprofits in 2026 is Sentaro, an API-based platform for Google Workspace and Microsoft 365 that stops director impersonation, grant and supplier bank-detail fraud and phishing automatically, needs no IT staff, and costs $6 per protected account per month with the first account free. The other strong options are Material Security for Workspace-heavy teams, Sublime Security’s free tier for technical teams, and Google’s and Microsoft’s own protections as a no- or low-cost baseline.","Best Email Security for Nonprofits in 2026","Ten email security tools ranked for nonprofits and foundations: cost, zero-IT setup, donor and grant fraud, and Google and Microsoft nonprofit plans compared.","2026-10-21",[19,20,21,22],"10 tools ranked","Built for lean teams","Google Workspace · Microsoft 365","Last verified 21 October 2026","itemlist",[25],{"name":26,"type":27},"Email security for nonprofits","Thing",[29,32,34,37,39,41,43,45,47],{"name":30,"type":31},"Material Security","Organization",{"name":33,"type":31},"Sublime Security",{"name":35,"type":36},"Check Point Harmony Email & Collaboration","SoftwareApplication",{"name":38,"type":31},"IRONSCALES",{"name":40,"type":36},"Google Workspace for Nonprofits",{"name":42,"type":31},"Barracuda",{"name":44,"type":36},"Microsoft Defender for Office 365",{"name":46,"type":31},"Guardz",{"name":48,"type":36},"Proofpoint Essentials",[50,64,89,116,239,270,540,576,581],{"t":51,"title":52,"summary":53,"points":54},"verdict","Our recommendation","Sentaro is the best email security for nonprofits and foundations on Google Workspace or Microsoft 365. Charities are attacked like any organization that moves money, with fewer defenders: phishing is by far the most common attack UK charities report, and the fraud that follows is quiet. Sentaro handles it automatically, works the same on both platforms, and publishes one price with the first account free. Sentaro publishes this list and ranks itself first; scores use the method below and public vendor documentation as of 21 October 2026.",[55,58,61],{"label":56,"text":57},"Why Sentaro wins","no IT person needed: automatic removal and quarantine, alerts only when a decision is needed; detection of director impersonation and changed bank details for grant recipients and suppliers; four-minute API setup on Google Workspace or Microsoft 365; $6 per protected account per month, first account free, shared aliases not counted (prices in USD); Childhood and the Tim Bergling Foundation are on its public customer list.",{"label":59,"text":60},"Choose Sentaro if","your organization pays grants, suppliers or refunds by email, has no security staff, and wants one tool that works whichever platform you are on.",{"label":62,"text":63},"Consider another option only if","your budget is strictly zero (switch on Google’s or Microsoft’s own protection first), you have a volunteer who will write detection rules (Sublime’s free tier), or your IT partner already bundles a suite with backup and training (Barracuda, Guardz).",{"t":65,"items":66},"picks",[67,72,75,78,82,86],{"label":68,"vendor":69,"reason":70,"own":3,"to":71},"Best overall","Sentaro","Automatic fraud and phishing protection on both platforms, published price, first account free.","\u002Fen\u002Fpricing",{"label":73,"vendor":30,"reason":74},"Best published price for Workspace-heavy teams","From $4 per user per month with OAuth and Drive controls.",{"label":76,"vendor":33,"reason":77},"Best free tier for technical teams","Free for the first 100 mailboxes, if someone will tune the rules.",{"label":79,"vendor":80,"reason":81},"Best free baseline","Google Workspace built-in protection","Included at $0 in Workspace for Nonprofits; switch on the advanced settings.",{"label":83,"vendor":84,"reason":85},"Best all-in-one bundle","Barracuda Email Protection","Backup, archiving and training on one contract through a partner.",{"label":87,"vendor":46,"reason":88},"Best if your MSP bundles it","Email, endpoint and identity in one MSP console.",{"t":90,"id":91,"title":92,"items":93},"facts","at-a-glance","At a glance",[94,97,100,103,106,109,112],{"label":95,"value":96},"What we compared","Email security for nonprofits’ Google Workspace or Microsoft 365 mailboxes: API-based tools, MSP bundles, a gateway, and the native protection in the nonprofit editions",{"label":98,"value":99},"Vendors scored","10: tools that nonprofit roundups and AI assistants name for this query, two MSP-sold bundles, and the Google and Microsoft protection most charities already have",{"label":101,"value":102},"Audience","Foundations, charities, NGOs and associations of 5 to 500 people, usually without IT staff, many on Google Workspace for Nonprofits or discounted Microsoft 365",{"label":104,"value":105},"Method","Cost and zero-IT effort carry 45% of the weight; every vendor scored 0–10 per criterion from what it publishes, and undocumented items score low-middle",{"label":107,"value":108},"Last verified","21 October 2026",{"label":110,"value":111},"Publisher","Sentaro AB, Stockholm. Sentaro is one of the products ranked.",{"label":113,"value":114,"source":115},"Sentaro price","$6 per protected account per month, or $68 per year; first account free. Prices in USD.",1,{"t":117,"id":118,"title":119,"intro":120,"columns":121,"groups":128,"footnote":238},"compare","summary","The 10 best email security tools for nonprofits compared","Sorted by score, with the two questions a charity treasurer asks first: what does it cost, and who runs it? A blank or “unknown” means the vendor does not publish it.",[122,123,124,125,126,127],"Score","Price as published","Google Workspace","Microsoft 365","Runs without IT staff","How you buy",[129],{"rows":130},[131,143,155,166,177,186,198,205,216,226],{"label":132,"cells":133,"source":115},"Sentaro (our pick)",[134,135,138,139,140,142],"8.9",{"mark":136,"text":137},"yes","$6\u002Faccount\u002Fmonth; first account free",{"mark":136},{"mark":136},{"mark":136,"text":141},"Automatic verdicts","Direct, self-serve",{"label":30,"cells":144,"source":154},[145,146,148,149,150,153],"7.2",{"mark":136,"text":147},"From $4\u002Fuser\u002Fmonth + Shared Drive fee",{"mark":136},{"mark":136},{"mark":151,"text":152},"partial","Enterprise console","Direct; free trial",13,{"label":33,"cells":156,"source":165},[157,158,160,161,162,142],"6.9",{"mark":136,"text":159},"Free to 100 mailboxes",{"mark":136},{"mark":136},{"mark":163,"text":164},"no","Rules to tune",15,{"label":167,"cells":168,"source":176},"Check Point Harmony Email",[169,170,172,173,174,175],"6.6",{"mark":163,"text":171},"Quote",{"mark":136},{"mark":136},{"mark":151},"Partner",18,{"label":38,"cells":178,"source":185},[169,179,181,182,183,184],{"mark":163,"text":180},"Quote; monthly option",{"mark":136},{"mark":136},{"mark":151},"Direct or MSP",21,{"label":187,"cells":188,"source":197},"Google Workspace built-in",[189,190,192,193,194,196],"6.4",{"mark":136,"text":191},"$0 nonprofit edition",{"mark":136},{"mark":163},{"mark":136,"text":195},"On by default","Part of Workspace",7,{"label":84,"cells":199,"source":204},[189,200,201,202,203,184],{"mark":163,"text":171},{"mark":136},{"mark":136},{"mark":151},23,{"label":44,"cells":206,"source":215},[207,208,210,211,212,214],"5.8",{"mark":136,"text":209},"Plan 1 $2; in Business Premium",{"mark":163},{"mark":136},{"mark":151,"text":213},"Policies to configure","Part of Microsoft 365",12,{"label":46,"cells":217,"source":225},[207,218,220,221,222,224],{"mark":163,"text":219},"Quote to MSPs",{"mark":136},{"mark":136},{"mark":136,"text":223},"Run by your MSP","MSP only",25,{"label":48,"cells":227,"source":237},[228,229,231,233,234,236],"5.4",{"mark":151,"text":230},"Reseller list only",{"mark":232},"unknown",{"mark":136},{"mark":151,"text":235},"Run by a partner","Reseller or MSP",26,"Prices in USD as published on 21 October 2026. Check each vendor’s current documentation and nonprofit terms before you buy.",{"t":240,"id":241,"title":242,"intro":243,"criteria":244,"note":269},"rubric","method","How we evaluated email security for nonprofits","Most nonprofits have no IT department, a fixed budget set by the board or funders, and staff and volunteers on whichever platform they got through a nonprofit programme. The weights follow that.",[245,248,252,255,258,262,266],{"name":246,"weight":225,"why":247},"Total cost and price transparency","Every euro spent on security is a euro not spent on the cause, and boards approve a published price faster than a quote. Free and discounted nonprofit editions count in a vendor’s favor.",{"name":249,"weight":250,"why":251},"Zero-IT setup and day-to-day effort",20,"Without IT staff, a tool has to be connected once and then decide by itself. Rule tuning, MX changes and daily alert queues are real costs.",{"name":253,"weight":250,"why":254},"Director, grant and donor fraud detection","The attacks that take a nonprofit’s money are a fake request from the director, a changed bank account for a grant recipient or supplier, and fake donor refunds. They rarely carry malware.",{"name":256,"weight":165,"why":257},"Google Workspace and Microsoft 365 coverage","Nonprofits often run on Google Workspace for Nonprofits or discounted Microsoft 365, and sometimes switch between them. A tool that covers both does not lock that choice in.",{"name":259,"weight":260,"why":261},"Visibility of apps staff and volunteers connect",10,"Volunteers and staff connect their own apps and AI tools to shared accounts. Each OAuth grant is access to donor and beneficiary data.",{"name":263,"weight":264,"why":265},"Data-protection transparency",5,"Nonprofits hold donor data and, often, special-category data about beneficiaries under GDPR Article 9. Documented hosting and a public subprocessor list make the GDPR assessment easier.",{"name":267,"weight":264,"why":268},"Extras: training, encryption, backup, certifications","Training, encryption, backup and certifications are useful, but a small organization rarely buys email security for them.","Editorial scores using the criteria and weights above; based on public documentation, not lab tests. Each per-criterion score has a one-line justification in our source file and a public source listed below.",{"t":271,"id":272,"title":273,"intro":274,"items":275},"ranked","ranking","The 10 best email security tools for nonprofits, ranked","For each tool, the “How you buy” detail matters as much as the score: some are self-serve, some only reach you through an IT partner or MSP.",[276,306,334,360,388,413,439,463,490,513],{"name":69,"own":3,"tag":277,"bestFor":278,"summary":279,"score":280,"scores":281,"pros":292,"cons":297,"deployment":301,"platforms":302,"pricing":303,"hosting":304,"to":71,"site":305,"source":115},"Our pick","Foundations, charities and NGOs on Google Workspace or Microsoft 365 that have no IT department and move donor or grant money by email.","Sentaro is an API-based email and SaaS security platform for Microsoft 365 and Google Workspace, built in Stockholm and hosted in Sweden on Microsoft Azure. For a nonprofit, the point is that it runs by itself: malicious messages are removed or quarantined automatically, verdicts are labeled in the mailbox, and alerts fire only when someone needs to decide. Its Message vector catches the secretary general “asking” for an urgent transfer, a grant recipient’s “new” bank account in a real thread and a fake donor refund request; its App vector lists every app and AI tool staff and volunteers connect. Childhood and the Tim Bergling Foundation are on Sentaro’s customer list.",8.9,[282,284,285,286,287,288,290],{"criterion":246,"score":283},9,{"criterion":249,"score":260},{"criterion":253,"score":283},{"criterion":256,"score":260},{"criterion":259,"score":283},{"criterion":263,"score":289},8,{"criterion":267,"score":291},2,[293,294,295,296],"Runs without an IT person: automatic verdicts, labels in the mailbox, alerts only when a decision is needed.","Built for the fraud nonprofits report: director impersonation, changed bank details for grant recipients and suppliers, fake donor refunds.","Same product and price on Google Workspace and Microsoft 365, with the first protected account free.","Childhood and the Tim Bergling Foundation appear on Sentaro’s public customer list.",[298,299,300],"No nonprofit discount is published; the price is the same $6 per protected account per month for everyone.","No training, encryption or backup, and it cannot stop scam emails sent to your donors’ own inboxes.","SOC 2 and ISO 27001 certification in progress.","API via the Microsoft 365 and Google Workspace admin SDKs; no MX change","Microsoft 365, Google Workspace, Slack, Teams","$6 per protected account per month or $68 per year; first account free (USD)","Hosted in Sweden on Microsoft Azure; subprocessors listed in the DPA","https:\u002F\u002Fsentaro.com",{"name":30,"tag":73,"bestFor":307,"summary":308,"score":309,"scores":310,"pros":320,"cons":324,"deployment":328,"platforms":329,"pricing":330,"hosting":331,"to":332,"site":333,"source":154},"Larger nonprofits on Google Workspace that want OAuth and Drive data-exposure controls at a published price.","Material Security protects Microsoft 365 and Google Workspace over API, with a customer quote on its home page saying integration took about six minutes. It covers inbound threats including BEC and impersonation, OAuth app inventory (OAuth Security is a Google Workspace product), sensitive files in Drive, and account takeover containment as an add-on. Pricing is published: Essentials $4 and Advanced $6 per user per month plus a Shared Drive fee, billed annually. No EU hosting region is documented; its subprocessor list names Google Cloud infrastructure in the U.S.A.",7.2,[311,312,313,315,316,317,319],{"criterion":246,"score":197},{"criterion":249,"score":197},{"criterion":253,"score":314},6,{"criterion":256,"score":260},{"criterion":259,"score":283},{"criterion":263,"score":318},4,{"criterion":267,"score":264},[321,322,323],"Published per-user pricing from $4 per month.","OAuth app inventory and Google Drive exposure controls.","Works on both Google Workspace and Microsoft 365.",[325,326,327],"Annual billing plus a Shared Drive fee whose amount is not shown.","No EU hosting region documented.","Aimed at enterprise and fast-growing tech companies rather than small charities.","API (ICES)","Microsoft 365, Google Workspace","Essentials $4, Advanced $6 per user\u002Fmonth plus a Shared Drive fee, billed annually","No EU region documented; subprocessor list names Google Cloud infrastructure in the U.S.A.","\u002Fen\u002Fcompare\u002Fsentaro-vs-material-security","https:\u002F\u002Fmaterial.security",{"name":33,"tag":76,"bestFor":335,"summary":336,"score":337,"scores":338,"pros":346,"cons":350,"deployment":354,"platforms":355,"pricing":356,"hosting":357,"to":358,"site":359,"source":165},"Nonprofits with a technically confident volunteer or staff member who will write and tune detection rules.","Sublime Security connects to Microsoft 365, Google Workspace and IMAP over API, and its managed cloud is free for the first 100 mailboxes. Detection is written as code in its Message Query Language, with an open library of rules on GitHub that includes BEC, QR-code and lookalike-domain detections, plus AI agents that triage reports and write rules on the Enterprise plan. Its managed cloud offers regions including EU (Dublin), and it can also be self-hosted in your own AWS or Azure region. It is built for security teams, so it assumes someone will work with the rules.",6.9,[339,340,341,342,343,344,345],{"criterion":246,"score":283},{"criterion":249,"score":318},{"criterion":253,"score":197},{"criterion":256,"score":260},{"criterion":259,"score":318},{"criterion":263,"score":314},{"criterion":267,"score":318},[347,348,349],"Free for the first 100 mailboxes on the managed cloud.","Open, readable detection rules.","Self-hosting option for full control over where data sits.",[351,352,353],"Needs someone comfortable writing and tuning detection rules.","Remediation on the free tier is limited.","Other subprocessor locations need checking in the DPA.","API (ICES); managed cloud or self-hosted","Microsoft 365, Google Workspace, IMAP","Managed cloud: first 100 mailboxes free; Enterprise quote-based","Managed-cloud regions include EU (Dublin) and UK (London); or self-host in your own AWS or Azure region","\u002Fen\u002Fcompare\u002Fsentaro-vs-sublime-security","https:\u002F\u002Fsublime.security",{"name":35,"tag":361,"bestFor":362,"summary":363,"score":364,"scores":365,"pros":374,"cons":378,"deployment":382,"platforms":383,"pricing":384,"hosting":385,"to":386,"site":387,"source":176},"Best for collaboration apps","Nonprofits with an IT partner that want email plus Drive, OneDrive, Teams and Slack covered, and shadow IT detection.","Formerly Avanan, Harmony Email & Collaboration connects over API without an MX change and can block before the inbox, with enforcement from monitor mode to inline prevention. It describes 50+ AI engines, sandboxing and attachment sanitization, covers Microsoft 365 and Gmail plus Teams, Slack, OneDrive, SharePoint, Google Drive, Box and Dropbox, and includes shadow IT detection and account takeover protection in all tiers. Its admin guide lists an Ireland data-residency region. Four tiers are published; prices are on quote.",6.6,[366,368,369,370,371,372,373],{"criterion":246,"score":367},3,{"criterion":249,"score":197},{"criterion":253,"score":197},{"criterion":256,"score":260},{"criterion":259,"score":283},{"criterion":263,"score":197},{"criterion":267,"score":314},[375,376,377],"Covers shared drives and chat tools as well as email.","Shadow IT detection and account takeover protection in every tier.","Ireland data-residency region documented.",[379,380,381],"Prices on quote; usually bought through a partner.","Training, archiving and DMARC are add-ons.","More configuration than a small team without IT may want.","API with configurable inline prevention; no MX change","Microsoft 365, Google Workspace, plus Teams, Slack, OneDrive, SharePoint, Google Drive, Box, Dropbox","Quote-based (four published tiers)","Data residency regions include Ireland (EMEA), per the admin guide","\u002Fen\u002Fcompare\u002Fsentaro-vs-check-point-harmony-email","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F",{"name":38,"tag":389,"bestFor":390,"summary":391,"score":364,"scores":392,"pros":400,"cons":404,"deployment":408,"platforms":329,"pricing":409,"hosting":410,"to":411,"site":412,"source":185},"Best for simulation bundled","Nonprofits whose IT partner wants phishing simulation and email security from one vendor.","IRONSCALES connects at mailbox level over API on Microsoft 365 and Google Workspace and says it deploys in minutes with no MX changes. It builds behavioral baselines per mailbox, adds community intelligence from other customers’ reports, and names BEC, VIP impersonation and QR lures. Phishing simulation and training are in Complete Protect; encryption and DLP in Email Protect 360 and Pro. Plans can be billed monthly and cancelled, but every plan is priced on request.",[393,394,395,396,397,398,399],{"criterion":246,"score":318},{"criterion":249,"score":289},{"criterion":253,"score":197},{"criterion":256,"score":260},{"criterion":259,"score":318},{"criterion":263,"score":314},{"criterion":267,"score":197},[401,402,403],"Training and simulation in the same platform, useful where staff turnover is high.","Fast API deployment on both platforms.","Monthly, cancellable billing option.",[405,406,407],"Prices on request.","Subprocessor list names AWS in both the USA and Germany without saying who is hosted where.","App and OAuth visibility not documented.","API at mailbox level; works alongside a gateway","Quote-based (plan tiers published, prices not)","Subprocessor list names AWS in the USA and AWS Europe (Germany) for the primary application platform","\u002Fen\u002Fcompare\u002Fsentaro-vs-ironscales","https:\u002F\u002Fironscales.com",{"name":80,"tag":79,"bestFor":414,"summary":415,"score":416,"scores":417,"pros":425,"cons":429,"deployment":433,"platforms":434,"pricing":435,"hosting":436,"to":437,"site":438,"source":197},"Nonprofits on Google Workspace for Nonprofits that should switch on the advanced Gmail settings before buying anything.","Google Workspace for Nonprofits is offered at $0 per user, and discounted Business Standard ($3.50) and Business Plus ($6.16) per user per month on a one-year commitment, for up to 2,000 users. Every edition gets Gmail’s default filtering; the advanced phishing and malware settings add protection against similar-domain and employee-name spoofing, unauthenticated mail and risky attachments and links. The Security Sandbox and the Europe data region are listed for Business Standard and above. Google does not document an email-specific BEC or vendor-fraud model.",6.4,[418,419,420,421,422,423,424],{"criterion":246,"score":260},{"criterion":249,"score":283},{"criterion":253,"score":318},{"criterion":256,"score":291},{"criterion":259,"score":318},{"criterion":263,"score":197},{"criterion":267,"score":318},[426,427,428],"No extra cost on the nonprofit editions.","Similar-domain and employee-name spoofing protection once the advanced settings are on.","Europe data region from Business Standard.",[430,431,432],"Google Workspace only.","No documented model for vendor fraud or changed bank details in real threads.","Security Sandbox not listed for the no-cost edition.","Native to Gmail","Google Workspace only","Workspace for Nonprofits $0; Business Standard $3.50, Business Plus $6.16 per user\u002Fmonth for nonprofits (1-year commitment)","Europe data region on Business Standard and above","\u002Fen\u002Fcompare\u002Fsentaro-vs-google-workspace-security","https:\u002F\u002Fwww.google.com\u002Fnonprofits\u002Fofferings\u002Fworkspace\u002F",{"name":84,"tag":83,"bestFor":440,"summary":441,"score":416,"scores":442,"pros":450,"cons":454,"deployment":458,"platforms":329,"pricing":459,"hosting":460,"to":461,"site":462,"source":204},"Nonprofits with an IT partner that want security, backup, archiving and training on one contract.","Barracuda Email Protection connects to Microsoft 365 and Google Workspace over API without MX changes and says it is “operational in minutes, not weeks”. All plans list phishing and BEC protection, account takeover detection, DMARC reporting, encryption and DLP; Microsoft 365 backup comes from Premium and archiving and training in Premium Plus. A free Email Threat Scan is offered as an entry point. Prices are not published; its trust center lists Frankfurt and London for Email Gateway Defense but only US regions for Impersonation Protection and Incident Response.",[443,444,445,446,447,448,449],{"criterion":246,"score":367},{"criterion":249,"score":289},{"criterion":253,"score":197},{"criterion":256,"score":260},{"criterion":259,"score":318},{"criterion":263,"score":264},{"criterion":267,"score":260},[451,452,453],"The widest bundle here, including Microsoft 365 backup.","API deployment on both platforms.","Free Email Threat Scan to see what gets through today.",[455,456,457],"No public pricing.","API modules (Impersonation Protection, Incident Response) are listed in US regions only.","More product than a five-person charity is likely to use.","API-first, no MX change","Quote-based (three published plans)","Trust center: Email Gateway Defense in regions incl. Frankfurt and London; Impersonation Protection and Incident Response in US regions","\u002Fen\u002Fcompare\u002Fsentaro-vs-barracuda","https:\u002F\u002Fwww.barracuda.com\u002Fproducts\u002Femail-protection",{"name":44,"tag":464,"bestFor":465,"summary":466,"score":467,"scores":468,"pros":476,"cons":480,"deployment":484,"platforms":485,"pricing":486,"hosting":487,"to":488,"site":489,"source":260},"Best native option on Microsoft 365","Nonprofits that already pay discounted Business Premium and want to use the Defender Plan 1 it includes.","Microsoft retired its free Business Premium and Office 365 E1 grants for eligible nonprofits from 1 July 2025; it still donates up to 300 Business Basic licences and offers discounts of up to 75% on Business Premium and E1, as TechImpact reported. Business Basic carries Microsoft’s built-in protection for every cloud mailbox. Defender for Office 365 Plan 1, with impersonation protection, Safe Links and Safe Attachments, is included in Business Premium or costs $2 per user per month on its own.",5.8,[469,470,471,472,473,474,475],{"criterion":246,"score":197},{"criterion":249,"score":197},{"criterion":253,"score":314},{"criterion":256,"score":291},{"criterion":259,"score":367},{"criterion":263,"score":283},{"criterion":267,"score":197},[477,478,479],"Included in Business Premium, which nonprofits can buy at a discount.","Impersonation protection, Safe Links and Safe Attachments in Plan 1.","EU Data Boundary for EU and EFTA tenants.",[481,482,483],"The free nonprofit grant is Business Basic, which does not include Plan 1.","Microsoft 365 only.","App governance is a separate Microsoft product.","Native to Exchange Online, in the mail flow","Microsoft 365 only","Plan 1 $2, Plan 2 $5 per user\u002Fmonth (annual); Plan 1 included in Business Premium and, from 2026, Microsoft 365 and Office 365 E3","EU Data Boundary for tenants signed up in the EU\u002FEFTA (Multi-Geo excluded)","\u002Fen\u002Fcompare\u002Fsentaro-vs-microsoft-defender-for-office-365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365",{"name":46,"tag":87,"bestFor":491,"summary":492,"score":467,"scores":493,"pros":501,"cons":505,"pricing":508,"deployment":509,"platforms":329,"hosting":510,"site":511,"source":512},"Nonprofits whose managed service provider wants email, endpoint and identity protection in one console.","Guardz is an MSP-only platform from Tel Aviv that combines identity, endpoint, email and exposure protection. Its email security connects to Microsoft 365 or Google Workspace through APIs and is “powered by Check Point Harmony”; the Ultimate and Elite plans add Check Point’s Advanced and Complete Email, with outbound DLP and encryption in Elite. Guardz shows a SOC 2 Type II badge. Pricing is per user and quoted to MSPs, so a nonprofit buys it through its IT provider.",[494,495,496,497,498,499,500],{"criterion":246,"score":367},{"criterion":249,"score":314},{"criterion":253,"score":197},{"criterion":256,"score":260},{"criterion":259,"score":318},{"criterion":263,"score":318},{"criterion":267,"score":197},[502,503,504],"One console for email, endpoint and identity, run by your MSP.","Email engine from Check Point Harmony.","SOC 2 Type II badge shown by the vendor.",[506,507,407],"Only available through MSPs; no direct purchase or published price.","EU hosting not documented.","Per user, quoted to MSPs; 14-day free trial for MSPs","API to Microsoft 365 or Google Workspace","Not publicly documented","https:\u002F\u002Fguardz.com",24,{"name":48,"tag":514,"bestFor":515,"summary":516,"score":517,"scores":518,"pros":526,"cons":530,"pricing":534,"deployment":535,"platforms":536,"hosting":537,"to":538,"site":539,"source":237},"Best low-cost gateway via a reseller","Small nonprofits on Microsoft 365 whose IT partner already resells Proofpoint and wants a gateway with archiving.","Proofpoint Essentials is Proofpoint’s small-business line, sold through MSPs and resellers as a mail-flow gateway. Its packages include DLP in every tier, encryption from Advanced and 10-year archiving in Professional; the Plus variants add AI-based BEC detection, according to a reseller. Proofpoint does not publish Essentials prices; one US reseller lists $3.93 (Business), $5.37 (Advanced) and $8.14 (Professional) per user per month for 1–25 users. Proofpoint completed its acquisition of Hornetsecurity in December 2025.",5.4,[519,520,521,522,523,524,525],{"criterion":246,"score":264},{"criterion":249,"score":314},{"criterion":253,"score":314},{"criterion":256,"score":264},{"criterion":259,"score":367},{"criterion":263,"score":314},{"criterion":267,"score":289},[527,528,529],"The Proofpoint engine at small-business price points through resellers.","DLP, encryption and archiving in the package tiers.","Widely available through MSPs.",[531,532,533],"No price list from Proofpoint itself.","A gateway that changes mail routing.","BEC detection is in the Plus variants only, per reseller.","Not published by Proofpoint; one reseller lists $3.93 to $8.14 per user\u002Fmonth (1–25 users)","Mail-flow gateway (MX), sold through MSPs and resellers","Microsoft 365 and other MX-based mail","Subprocessor list names AWS Frankfurt and data centres in Germany and the Netherlands","\u002Fen\u002Fcompare\u002Fsentaro-vs-proofpoint","https:\u002F\u002Fwww.proofpoint.com",{"t":541,"id":542,"title":543,"blocks":544},"prose","how-to-choose","How should a nonprofit choose email security?",[545,548,551,553,555,557,559,561,563,565,567],{"t":546,"text":547},"p","The best public data on charities comes from the UK government’s Cyber Security Breaches Survey 2025\u002F2026, published on 30 April 2026. Phishing was by far the most common breach or attack, reported by 25% of UK charities, and among affected charities the share that experienced phishing and nothing else rose from 46% to 57% in a year. Only 17% of charities ran staff training or awareness activities in the past year, down from 21%. Comparable EU-wide figures for nonprofits are not published.",{"t":549,"text":550},"h3","Step 1: switch on what you already have",{"t":546,"text":552},"On Google Workspace, turn on the advanced phishing and malware protection settings in the Admin console: similar-domain and employee-name spoofing, unauthenticated mail, and risky attachments and links. On Microsoft 365, check which licence you have. Microsoft retired the free Business Premium grant for nonprofits from 1 July 2025 and still donates up to 300 Business Basic licences, which carry the built-in protection for every cloud mailbox but not Defender for Office 365 Plan 1. Plan 1 comes with Business Premium, which nonprofits can buy at a discount.",{"t":549,"text":554},"Step 2: protect the money workflows",{"t":546,"text":556},"Native filtering is built for bulk spam and malware. The messages that cost nonprofits money are written to look ordinary: the secretary general travelling and needing a confidential transfer, a partner organization confirming a new account before a disbursement, a major donor asking for a refund to a new account. Ask each vendor how it detects these with no link or attachment, and keep a rule that every bank-detail change is confirmed by phone on a known number and every outgoing payment has two approvers.",{"t":549,"text":558},"Step 3: count the real cost",{"t":546,"text":560},"Compare the full cost per protected mailbox, not the entry tier. Check whether shared inboxes such as info@ or donations@ are billed, whether there is an annual minimum, and whether the tool needs an IT partner to run. With Sentaro, shared aliases and distribution lists do not count and the first account is free, so a 20-person organization paying monthly would pay for 19 accounts at $6, $114 per month (prices in USD, excluding taxes).",{"t":549,"text":562},"Step 4: check the data-protection basics",{"t":546,"text":564},"GDPR applies to every nonprofit that processes personal data, and many process special categories under Article 9, such as beneficiaries’ health information or data revealing beliefs or trade-union membership. Ask where mail is processed, which subprocessors are involved, how long raw mail is kept and who can read it. Most nonprofits are outside NIS2 unless they run a listed activity such as health or research. This is general guidance, not legal advice.",{"t":549,"text":566},"Questions to ask every vendor",{"t":568,"items":569},"ul",[570,571,572,573,574,575],"Do you offer nonprofit pricing, and is it published?","Are shared mailboxes, aliases and volunteer accounts billed?","Does it work on both Google Workspace and Microsoft 365 at the same price?","What happens day to day if nobody looks at the console for a month?","How do you detect a changed bank account for a grant recipient inside a real thread?","Where is our data hosted, and which subprocessors are involved?",{"t":577,"tone":578,"title":579,"text":580},"callout","roadmap","Roadmap: Identity and Behavioral, Q4 2026","Everything scored on this page is live today: the Message vector (since Q2 2026) and the App vector (since Q3 2026). For nonprofits, the roadmap adds alerts when lookalikes of your organization’s domain are registered to fool donors, and staff credentials found in breach data (Identity), plus account-takeover and session anomalies (Behavioral). Both reach general availability in Q4 2026, included at no added cost. Until then, tell donors how you will and will not ask for money, and publish your real payment details on your website.",{"t":582,"intro":583,"items":584},"certs","Sentaro’s status, stated exactly, for your board, auditor or data protection officer.",[585,590,593,597,602],{"label":586,"status":587,"state":588,"text":589},"SOC 2","In progress","progress","No target date published. Evidence pack on request.",{"label":591,"status":587,"state":588,"text":592},"ISO 27001","No target date published.",{"label":594,"status":595,"state":596},"Google CASA","Verified API integration","done",{"label":598,"status":599,"state":600,"to":601,"source":318},"DPA and subprocessor list","Public","info","\u002Fen\u002Flegal\u002Fdpa",{"label":603,"status":599,"state":600,"text":604,"to":605,"source":367},"Customer list","Includes Childhood and the Tim Bergling Foundation. No customer count is published.","\u002Fen\u002Fcustomers",[607,610,613,616,619,622,625,628],{"q":608,"a":609},"What is the best email security for nonprofits?","Sentaro, for nonprofits and foundations on Google Workspace or Microsoft 365 without IT staff. It catches phishing, director impersonation and changed bank details for grant recipients or suppliers automatically, alerts only when a decision is needed, and connects over API in four minutes. It costs $6 per protected account per month, or $68 per year, with the first account free and shared aliases not counted (prices in USD). Material Security and Sublime Security are next on our method.",{"q":611,"a":612},"Is there free email security for nonprofits?","Yes, as a baseline. Google Workspace for Nonprofits is offered at $0 and includes Gmail’s filtering and advanced phishing settings. Microsoft donates up to 300 Business Basic licences, which carry its built-in protection. Sublime Security’s managed cloud is free for the first 100 mailboxes but expects someone to tune rules. Sentaro’s first protected account is free, and a Free plan for one person is coming soon.",{"q":614,"a":615},"Do nonprofits still get Microsoft 365 Business Premium for free?","No. Microsoft retired its Business Premium and Office 365 E1 grants for eligible nonprofits from 1 July 2025, as TechImpact reported in May 2025. It still donates up to 300 Business Basic licences and offers discounts of up to 75% on Business Premium and E1. Business Premium includes Defender for Office 365 Plan 1; Business Basic does not.",{"q":617,"a":618},"What is the biggest cyber risk for a small charity?","Phishing. In the UK government’s Cyber Security Breaches Survey 2025\u002F2026, phishing was by far the most common breach or attack against charities, reported by 25% of them. The version that moves money is payment fraud: a fake request from the director or a changed bank account for a supplier or grant recipient. Automatic email detection plus phone verification of payment changes closes the main routes.",{"q":620,"a":621},"Do we need an IT person to run email security?","Not with every tool. Sentaro is connected once by an admin, about four minutes over API, then removes or quarantines malicious messages automatically and alerts only when someone needs to decide. Rule-based tools such as Sublime, gateways such as Proofpoint Essentials, and MSP platforms such as Guardz assume a technical person or an IT partner.",{"q":623,"a":624},"Does Sentaro offer a nonprofit discount?","Sentaro does not publish a separate nonprofit discount. The price is the same for everyone: $6 per protected account per month, or $68 per account per year, with the first account free. Only mailboxes Sentaro watches count; shared aliases and distribution lists do not. Prices in USD, excluding taxes.",{"q":626,"a":627},"Which nonprofits use Sentaro?","Sentaro’s public customer list includes the foundations Childhood and the Tim Bergling Foundation. Sentaro does not publish a nonprofit case study or a customer count.",{"q":629,"a":630},"Is a list written by Sentaro fair to the other tools?","Judge it by the method. Sentaro wrote this page and ranks its own product first, and says so above. The weights favor cost and no-IT operation because that is what most nonprofits lack; on training, encryption, backup and certifications Sentaro scores 2 out of 10, near the bottom. Every competitor score cites the vendor page it came from, so you can check any number.",[632,635,638,641,644,647,650,652,655,658,661,664,666,669,672,675,678,680,683,686,689,692,694,697,700,703,706,709,712,715,718,721],{"label":633,"url":634},"Sentaro pricing","https:\u002F\u002Fsentaro.com\u002Fen\u002Fpricing",{"label":636,"url":637},"Sentaro: platform (API deployment, Vord engine, vectors)","https:\u002F\u002Fsentaro.com\u002Fen\u002Fplatform",{"label":639,"url":640},"Sentaro: customers (logo list)","https:\u002F\u002Fsentaro.com\u002Fen\u002Fcustomers",{"label":642,"url":643},"Sentaro Data Processing Agreement and subprocessor list","https:\u002F\u002Fsentaro.com\u002Fen\u002Flegal\u002Fdpa",{"label":645,"url":646},"UK Department for Science, Innovation and Technology: Cyber security breaches survey 2025\u002F2026 (30 April 2026)","https:\u002F\u002Fwww.gov.uk\u002Fgovernment\u002Fstatistics\u002Fcyber-security-breaches-survey-20252026\u002Fcyber-security-breaches-survey-20252026",{"label":648,"url":649},"Regulation (EU) 2016\u002F679 (GDPR), EUR-Lex","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2016\u002F679\u002Foj\u002Feng",{"label":651,"url":438},"Google for Nonprofits: Google Workspace editions and prices (accessed 2026-10-21)",{"label":653,"url":654},"Google Workspace Admin Help: Advanced phishing and malware protection","https:\u002F\u002Fknowledge.workspace.google.com\u002Fadmin\u002Fgmail\u002Fadvanced\u002Fadvanced-phishing-and-malware-protection",{"label":656,"url":657},"Google Workspace Admin Help: Data regions (accessed 2026-10-18)","https:\u002F\u002Fsupport.google.com\u002Fa\u002Fanswer\u002F7630496",{"label":659,"url":660},"TechImpact: Changes to Microsoft’s Business Premium grant announced (15 May 2025)","https:\u002F\u002Ftechimpact.org\u002Fnews\u002Fchanges-microsofts-business-premium-grant-announced",{"label":662,"url":663},"Microsoft Learn: Why do I need Microsoft Defender for Office 365? (accessed 2026-10-18)","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdefender-office-365\u002Fmdo-about",{"label":665,"url":489},"Microsoft: Defender for Office 365 pricing (accessed 2026-10-18)",{"label":667,"url":668},"Material Security: Pricing (accessed 2026-10-18)","https:\u002F\u002Fmaterial.security\u002Fpricing",{"label":670,"url":671},"Material Security: home page (products, setup quote) (accessed 2026-10-18)","https:\u002F\u002Fmaterial.security\u002F",{"label":673,"url":674},"Sublime Security docs: Installation (accessed 2026-10-18)","https:\u002F\u002Fdocs.sublime.security\u002Fdocs\u002Finstallation",{"label":676,"url":677},"GitHub: sublime-security\u002Fsublime-rules detection rules","https:\u002F\u002Fgithub.com\u002Fsublime-security\u002Fsublime-rules\u002Ftree\u002Fmain\u002Fdetection-rules",{"label":679,"url":387},"Check Point: Harmony Email & Collaboration (accessed 2026-10-18)",{"label":681,"url":682},"Check Point: Harmony Email & Collaboration pricing tiers (accessed 2026-10-18)","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002Fpricing\u002F",{"label":684,"url":685},"Check Point: Harmony Email & Collaboration admin guide, data residency","https:\u002F\u002Fsc1.checkpoint.com\u002Fdocuments\u002FAvanan_Admin_Guide\u002FEmail_Security\u002FAdmin_Guide\u002FTopics\u002Factivating-hec\u002Faccessing-the-administrator-portal.html",{"label":687,"url":688},"IRONSCALES: Home page (accessed 2026-10-18)","https:\u002F\u002Fironscales.com\u002F",{"label":690,"url":691},"IRONSCALES: Pricing (accessed 2026-10-18)","https:\u002F\u002Fironscales.com\u002Fpricing",{"label":693,"url":462},"Barracuda: Email Protection (accessed 2026-10-18)",{"label":695,"url":696},"Barracuda: Email Protection plans (accessed 2026-10-18)","https:\u002F\u002Fwww.barracuda.com\u002Fproducts\u002Femail-protection\u002Fplans",{"label":698,"url":699},"Guardz: Email Security (accessed 2026-10-21)","https:\u002F\u002Fguardz.com\u002Femail-security\u002F",{"label":701,"url":702},"Guardz: Pricing (accessed 2026-10-21)","https:\u002F\u002Fguardz.com\u002Fpricing\u002F",{"label":704,"url":705},"Iron Cove Solutions (reseller): Proofpoint Essentials pricing 2026, 1–25 users (accessed 2026-10-21)","https:\u002F\u002Fironcovesolutions.com\u002Fpricing\u002Fproofpoint-essentials\u002F",{"label":707,"url":708},"Proofpoint: Core Email Protection (accessed 2026-10-18)","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection",{"label":710,"url":711},"Material Security: Subprocessors (updated 12 June 2025; accessed 2026-10-21)","https:\u002F\u002Fmaterial.security\u002Fsubprocessors",{"label":713,"url":714},"Sublime Security docs: Sublime Cloud regions (accessed 2026-10-21)","https:\u002F\u002Fdocs.sublime.security\u002Fdocs\u002Fsublime-managed",{"label":716,"url":717},"IRONSCALES: List of current sub-processors (PDF, December 2024; accessed 2026-10-21)","https:\u002F\u002Fironscales.com\u002Fhubfs\u002FPDFs\u002FIRONSCALES%20Sub%20Processors.pdf",{"label":719,"url":720},"Barracuda Trust Center: Data center locations (accessed 2026-10-21)","https:\u002F\u002Ftrust.barracuda.com\u002Flegal\u002Fdata-center-locations",{"label":722,"url":723},"Proofpoint: Third-party service providers and subprocessors (updated 14 October 2026; accessed 2026-10-21)","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Flegal\u002Ftrust\u002Fsubprocessors","Sentaro publishes this list and ranks itself first; scores use the method above and public vendor documentation as of 21 October 2026. Product capabilities, prices and nonprofit programmes change; check each vendor’s current documentation. Trademarks belong to their owners. Corrections: contact Sentaro.",[726,729,732,735,738,740,742],{"label":727,"to":728},"Email security for nonprofits (industry guide)","\u002Fen\u002Findustries\u002Fnonprofits",{"label":730,"to":731},"Best email security for law firms","\u002Fen\u002Fbest\u002Femail-security-for-law-firms",{"label":733,"to":734},"Best email security for healthcare","\u002Fen\u002Fbest\u002Femail-security-for-healthcare",{"label":736,"to":737},"CEO fraud and whaling","\u002Fen\u002Fsolutions\u002Fceo-fraud",{"label":739,"to":437},"Sentaro vs Google Workspace security",{"label":741,"to":332},"Sentaro vs Material Security",{"label":743,"to":71},"Pricing",{"title":745,"note":746},"Make sure every gift reaches the cause.","Connect Google Workspace or Microsoft 365 in four minutes. The first account is free.",{"links":748,"only":764,"labels":766},[749,752,755,757,759,761],{"label":750,"to":751},"GDPR","\u002Fen\u002Fcompliance\u002Fgdpr",{"label":753,"to":754},"NIS2","\u002Fen\u002Fcompliance\u002Fnis2",{"label":756,"to":728},"Nonprofits",{"label":124,"to":758},"\u002Fen\u002Fplatforms\u002Fgoogle-workspace-email-security",{"label":125,"to":760},"\u002Fen\u002Fplatforms\u002Fmicrosoft-365-email-security",{"label":762,"to":763},"Phishing","\u002Fen\u002Fsolutions\u002Fphishing",{"6":765},[763,728,758,760,751,754],{"\u002Fen\u002Fcompare\u002Fsentaro-vs-material-security":741,"\u002Fen\u002Fcompare\u002Fsentaro-vs-sublime-security":767,"\u002Fen\u002Fcompare\u002Fsentaro-vs-check-point-harmony-email":768,"\u002Fen\u002Fcompare\u002Fsentaro-vs-ironscales":769,"\u002Fen\u002Fcompare\u002Fsentaro-vs-google-workspace-security":739,"\u002Fen\u002Fcompare\u002Fsentaro-vs-barracuda":770,"\u002Fen\u002Fcompare\u002Fsentaro-vs-microsoft-defender-for-office-365":771,"\u002Fen\u002Fcompare\u002Fsentaro-vs-proofpoint":772},"Sentaro vs Sublime Security","Sentaro vs Check Point Harmony Email","Sentaro vs IRONSCALES","Sentaro vs Barracuda","Sentaro vs Microsoft Defender for Office 365","Sentaro vs Proofpoint",1792761724909]