VERIDEX
Prevent

Invoice Fraud
CEO Impersonation
Fake Senders

Preserve
Your Mailbox
Your Permissions
Your Mail Flow

The email that costs you isn't a hack. It's a human decision, made under pressure, in seconds.

Veridex is the tool built for the third layer. It catches phishing, invoice fraud, and impersonated senders at the moment your team reads the email: before anyone replies, clicks, or pays. It runs in the browser, so it never connects to your mailbox, and every alert provides reasoning.

L3 NetworkBypassed

Filters, gateways, DNS

L2 EndpointBypassed

AV, EDR, signatures

L1 CognitiveVeridex

The attacker is here:  see a real attack

No OAuth. No MX/DNS changes. No mail rerouted.

Works alongside Microsoft 365 and Google Workspace. Nothing to reconfigure.

Your filter passed it

An invoice you were expecting.

Before anyone replies, three questions decide everything:

Who actually sent this? Why now? What happens if I'm wrong?

An inbox answers none of them. Veridex answers all three: on the message itself, before a reply goes out.

Inbound · Delivered clean

Gateway verdict: no threat detected

From:
Vendor Supply LLC: Accounts
Address:
accounts@vendor-supply.co
Reply-To:
billing@vendor-supply.co
Known as:
accounts@vendorsupply.ae
SPF:
pass (for a domain that is not your vendor)
Domain age:
11 days
Subject:
Updated remittance details – INV 4471

Please note our banking has changed with our new facility. Kindly use the details below for invoice 4471, due Thursday. Apologies for the short notice.

Attachments None

Links None

Malware None

Veridex analysis

Verdict
Payment redirect: do not pay
Sender
Lookalike domain, registered 11 days ago
Authentication
Aligned: to the attacker's own domain
Behaviour
Change to established payment details, under a deadline
Do this
Confirm by phone on a number you already hold. Do not reply to this thread.

Your gateway inspected this and found nothing, because there is nothing to find. No payload means no signature and no sandbox verdict. The only thing between this email and a wire transfer is the person reading it: and that person isn't weak, they're being hunted.

The layer nobody else has

The metric that matters: the pause.

Cyber Awareness training happens in a room, months ago. Attacks happen in the inbox, when least expected.

Every other tool can tell you it blocked something. Only Veridex can tell you a person was about to act on a threat: and stopped. That's not a scan. That's a loss that didn't happen, captured at the one moment that decides the outcome: the pause between reading and acting. Every flag also becomes data: what's being attempted, who it's aimed at, how your team responds. Nobody else collects it, because nobody else is there. The organisation gets a picture; every user gets their own.

Representative view

Behaviour

28 seats active

Emails analysed

6,140

avg · 30 days

Threats flagged

274

4.5% of mail

Attacks stopped at the pause

181

warned + did not proceed

Median decision

6.4s

time to act

How the team responded

To flagged mail · aggregate, not per-person

Behavioural data: in your dashboard

Who is being targeted

Flagged mail by team function

  • 01 Finance & payments112
  • 02 Operations61
  • 03 Executive54
  • 04 Sales25

Threat volume: last 14 days

Flagged mail per day · campaign spikes in red

Two coordinated spikes detected: vendor-invoice campaign days 4–5, credential path day 10.

Top targeted domains

Lookalike and malicious senders, by appearance

  • VENDOR-SUPPLY.CO31 malicious
  • MICROSOFT-LOGIN.COM28 malicious
  • DOCS-SHAREPOINT.NET17 suspicious
  • PAYROLL-UPDATE.CO11 suspicious
Findings

Reasons technical solutions don't work.

Microsoft Defender, Mimecast, Proofpoint, Barracuda check DMARC, SPF, DKIM. If the signals pass, the email is delivered. Attackers know exactly what those checks look for and send emails that pass them cleanly. It's why BEC, invoice fraud and impersonation keep rising while malware detection improves. Your filter did its job. The attack was designed for what happens after.

01

Social engineering is the invisible threat.

No link, no attachment, nothing malicious in the file. A supplier emails updated bank details before the quarterly invoice. Your gateway inspects it, finds nothing, and delivers it: because there is nothing to find.

02

Security stops code. Attacks target people.

Filters scan for malware, signatures and bad domains: and they act once, at delivery. A payment-redirect email has none of those markers, so it passes. The moment it does, there is nothing left between the attacker and your employee but an inbox and a deadline.

03

Context is the difference.

The domain was registered eleven days ago. The reply-to doesn't match the sender. Your team has never received mail from this address before. None of that is visible in an inbox: and all of it is decisive.

UAE threat data · 2025

It isn't if, but when.

A convincing email will reach someone on your team: the numbers below are local, and they are not improving. The only variable you control is what stands between that email and a wire transfer.

10.7M

Average cost of a cyber incident per UAE business

83%

Of UAE email threats are phishing and impersonation: not malware.

86%

Of UAE companies have had at least one successful attack; 44% took a direct financial loss.

25.6%

Share of attacks that are BEC or social engineering: up from 20% a year earlier.

Sources: CPX UAE Cybercrime Statistics 2025; Acronis Cyberthreats Report 2025; Proofpoint State of the Phish.

Features

How It Works

The missing layer of human-level security. Real-time context about emails, senders, and links before you click.

team@company.com
Weekly Team Update
noreply@payment-service.net
Action Required: Verify Account
unknown-sender@external.com
Re: Your recent inquiry
support@trusted-service.com
Your Order Confirmation
Instant Signal

Real-time

With AI protection on, Veridex quietly analyzes each email you open in the background: no clicks, no interruptions.

01
From: unknown-sender@exter…
Urgent: Payment Required
Your account will be suspended if payment...
Zero friction

On-Demand

Veridex doesn't force scans. When something looks off, you choose to analyze the content.

02
Demo Example
Risk: 52%
Type: Invoice Fraud
Confidence Level (CL): 74%
From: unknown-sender@external.com
To: you@email.com
Reason
New sender + unusual payment request.
Recommendations
Verify via known contact first.
Context aware

Human-level

Veridex explains: risks, confidence, reasoning, and recommendeds next steps.

03
Live Demo

See it in action.

The same four-pillar analysis your team sees in the inbox: authentication, reputation, threat intelligence, and judgment: with the reasoning laid out and a chat to ask why.

Analyzing Email
From
CEO@COMPANY-INTERNAL.CO
Appears As
Urgent: Wire Transfer Request
Message
I need you to process this immediately. Please wire $45,000 to the attached account. Keep this between us for now.
Attachments
None
Links
None
Veridex Analysis
Monitoring...
Chain of custody

No mailbox access. Ever.

Every other tool in this category asks for a permission grant to your mailbox: OAuth, admin consent, a copy of your inbox in their cloud, and a token that outlives the pilot. Veridex asks for none of it. With AI protection on, only the one email your employee opens is sent to Veridex for analysis. Email bodies are not stored on our servers; for emails flagged in a full analysis, the sender address, subject, and our analysis are kept for 90 days.

Mailbox-connected tools

Abnormal, IRONSCALES, and every scanner that asks for admin consent

  1. Email arrives in your tenant
  2. You grant OAuth / admin consent
  3. Your mail is pulled into their cloud
  4. Analysed on their infrastructure
  5. Verdict returned

Security review, DPA, residency questions, and a mailbox-scoped token that outlives the pilot.

Veridex

Render layer. Inside the browser. Nothing granted.

  1. Email arrives in your tenant
  2. Your employee opens it
  3. Veridex reads what is already on screen
  4. Opened email analyzed by Veridex AI, verdict shown in place
  5. No token, no tenant permission, no change to your mail path

An extension install. Your admin grants nothing. Uninstall removes it, and you can ask us to delete your data.

Comparison

What your IT team will actually ask.

Veridex is a second layer, not a replacement. It sits behind whatever filter you already pay for and catches the residue: the impersonation and payment-redirect attempts that arrive technically clean.

Requires OAuth or admin consent

Veridex
No
Mailbox-connected tools
Yes
Gateway / Defender
Built in

Pulls your whole mailbox into a vendor cloud

Veridex
No
Mailbox-connected tools
Yes
Gateway / Defender
Yes

Requires MX or DNS changes

Veridex
No
Mailbox-connected tools
No
Gateway / Defender
Yes

Detects payload-free BEC

Veridex
Yes
Mailbox-connected tools
Yes
Gateway / Defender
Partially

Explains the reasoning to the employee

Veridex
Yes
Mailbox-connected tools
Varies
Gateway / Defender
No

Reports how staff actually responded

Veridex
Yes
Mailbox-connected tools
No
Gateway / Defender
No

No local files or trackers after uninstall

Veridex
Yes
Mailbox-connected tools
Token persists
Gateway / Defender
n/a

Time to deploy

Veridex
Under a minute
Mailbox-connected tools
Days
Gateway / Defender
Weeks
Who this is for

Built for teams that decide in the inbox.

One person approving a payment. One person resetting a password. One person typing credentials into a login page. Veridex is built for organisations on Microsoft 365 or Google Workspace where those decisions happen in seconds, by people who aren't security staff: without an enterprise budget or a mailbox integration project.

Approving payments

Supplier bank changes, wire instructions, invoices arriving on a deadline. One approval and the money is gone.

Handling credentials

Fake login pages, MFA prompts, password reset requests. One entry and the attacker is inside the account.

Acting on authority

A request from a name the person recognises: a director, a client, a vendor. Familiarity is what makes them act, and it's what a filter can't measure.

One price. Unlimited scans

Stop one fraud. Pay for a decade.

The average cyber incident costs a UAE business AED 10.7M, and a single redirected invoice can run into six figures. Veridex is AED 999 a month. The question isn't whether you can afford it: it's whether you can afford the one that gets through.

Team

Up to 25 users · billed annually

999

per month

You're not paying per scan. You're paying for the layer that turns those scans into an org-wide picture: who is being targeted, how often, and what they did when it happened. No one else is collecting this, because no one else sits at the moment of decision.

  • Real-time detection for every seat: phishing, invoice fraud, impersonation
  • Org-wide dashboard: every flagged email across the company in one view
  • Human risk insight: which people and roles attackers are going after
  • Response data: who blocked, who abandoned, who nearly acted
  • Act on it: brief the exposed people before the next attempt lands
  • Admin console, policy rollout, and email support

Need fewer seats, or more than 25? We'll size it to your team: talk to us and we'll set the right number.

Talk to sales

A trial period is available on request following the demo call.

Send us the one that got through.

Forward a phishing or invoice-fraud email your current filter delivered. On a 20-minute call we will show you exactly what Veridex would have put in front of your employee: on your own mail, with nothing installed.

Book a 20-min demo