Material Security is an email and workspace security platform for Microsoft 365 and Google Workspace, protecting against phishing, account takeover and data exposure. Pricing starts at $4 per user per month when billed annually, with deployment via API in under 30 minutes.
Listing updated . Checked by MSP Software .
Material Security is a cloud workspace security platform from Material Security for mid-to-large organizations running Microsoft 365 or Google Workspace. The platform combines email threat detection, account takeover containment, OAuth app governance, and file security in a single product, addressing attacks that bypass native controls and traditional email gateways. Material distinguishes itself by detecting and remediating threats after they reach the inbox, rather than relying solely on pre-delivery filtering, eliminating the need for quarantine workflows and manual triage. Material deploys entirely via API with no MX record changes or traffic rerouting, enabling integration in under 30 minutes rather than weeks.
Pricing starts at $4 per user per month for the Essentials tier when billed annually, plus additional fees for Shared Drive storage (checked September 2026). The Advanced tier costs $6 per user per month and adds agentic investigation of new OAuth grants and sensitive data detection in files and email. The ATO Resilience add-on provides specialized account takeover protection by detecting compromised accounts and automatically revoking attacker-installed forwarding rules and OAuth grants. Material also limits what an attacker can do with a compromised account by applying message-level access controls to sensitive content. Organisations can request enterprise plans with volume discounts. Material offers a free trial and live demos to evaluate the product before purchase, along with 24/7 support and documentation-based training.
Material integrates with Google Workspace, Microsoft 365, Okta, Duo, Slack, PagerDuty, and a broad range of SIEM and SOAR platforms including Splunk, Datadog, Panther, and Sumo Logic via webhooks and flexible APIs. Material was founded in 2017 by former Dropbox engineers and is based in Redwood City, California. MSPs should verify that Material's phishing and account takeover detection approach fits their clients' threat profile, and check whether the per-user billing model and Shared Drive storage fees align with their managed pricing structure.
Material Security stands out for post-delivery threat remediation and account takeover containment rather than quarantine-based approaches. It suits MSPs managing mixed Google Workspace and Microsoft 365 environments who want to reduce manual incident triage. The API deployment means no infrastructure changes, which matters for quick onboarding. Pricing is transparent and per-user, though additional Shared Drive storage fees apply. Compare against Proofpoint, Mimecast, and Check Point Harmony Email for feature parity and integration breadth. Confirm that Material's detection of forwarding rules and OAuth abuse patterns addresses your clients' incident patterns, and evaluate whether the AI-driven automation reduces your SOC workload compared to traditional secure email gateways.
Abnormal AI Behavioral-AI email and identity security deployed by API, with pricing available only by vendor quote. No reviews yet 
Sublime Security Email security via API with programmable rules, per mailbox, for Microsoft 365 and Google Workspace. No reviews yet · from US$76.20
Coro A consolidated SMB and MSP cybersecurity platform sold via partners on quote-only, per-user pricing. No reviews yet 
Guardz Unified MDR, endpoint, email and identity security for MSPs, priced per user on request. No reviews yet All alternatives to Material Security| Feature | Supported | Note |
|---|---|---|
| Phishing and malware filtering | yes | Detects phishing, BEC and targeted attacks that bypass native controls; automated remediation after delivery |
| Spoofing and impersonation protection | yes | Protects against spoofing and account impersonation attacks within cloud workspace |
| Email continuity | unknown | |
| Archiving | unknown | |
| Security awareness training bundle | no | Product focuses on automated detection and response, not user training |
| API-based post-delivery scanning | yes | API-based post-delivery scanning and remediation via Google Workspace and Microsoft 365 APIs |
| DMARC monitoring | unknown | |
| Attachment sandboxing | unknown | |
| Data loss prevention | yes | Message-level data protection and DLP for email and shared files; prevents exfiltration by compromised accounts |
| Email encryption | unknown | |
| Microsoft 365 integration | yes | Native integration with Microsoft 365 via Graph API; no MX changes required |
| Self-service quarantine | no | Material eliminates quarantine workflows entirely in favour of automated remediation |
Material Security is priced per user per month when billed annually, starting at $4 per user per month for the Essentials tier, $6 per user per month for Advanced, and $3 to $5 per user per month for the ATO Resilience add-on. This differs from traditional secure email gateways which typically charge per domain or per gateway appliance. Material also charges additional monthly fees for Shared Drive storage (minimum covers 1TB annually), and enterprise volume discounts are available on request.
Material Security offers a free trial period, which lets an MSP evaluate the platform's phishing detection and account takeover protection before committing. Live product demos are also available by request. There is no separate free version once the trial period ends, so ongoing use requires a paid subscription at one of Material Security's published tiers.
Material Security detects and remediates advanced phishing, business email compromise, and targeted attacks through API-based post-delivery scanning, catching threats that bypass native controls. When a threat is detected, Material automatically remediates malicious emails and revokes compromised forwarding rules and OAuth grants. It also applies message-level access controls to sensitive content so that even an attacker with valid credentials cannot freely read or exfiltrate high-value data.
No. Material Security deploys entirely via API integration with Google Workspace or Microsoft 365 in under 30 minutes, with no MX record changes or traffic rerouting required. This simplifies deployment for MSPs managing distributed or hybrid email environments and avoids the complexity of traditional secure email gateway deployment.
Material Security provides 24/7 support via email, Slack, Teams, and a customer portal, with responsive human support available across all subscription tiers. Training is delivered through documentation, product demo videos, webinars, and virtual onboarding sessions. Strategic advice and product expertise are available for higher-tier customers.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
