A new integration between INKY and SaaS Alerts automates cross-surface containment within seconds of detecting a compromised account. INKY detects the compromise in real time as email is processed, using signals such as outbound burst velocity, dangerous links and phishing content patterns. When risk thresholds are met, INKY automatically isolates the mailbox by quarantining or discarding outbound email.
The detection event immediately flows to SaaS Alerts, which locks the compromised user’s access across Microsoft 365, Google Workspace, Okta, Duo, Salesforce, Dropbox and other SaaS and identity platforms. Setup requires a single API key at the MSP level, covering every organization beneath you.



