365 Total Protection

Hornetsecurity 365 Total Protection is a Microsoft 365-native security suite built for organizations that want email protection, backup, archiving and user training under one vendor and one console rather than four separate ones. Following Proofpoint's acquisition of Hornetsecurity, the product is sold as "Hornetsecurity by Proofpoint."

The commercial structure matters as much as the feature set. 365 Total Protection is sold as a four-step plan ladder - Plan 1 at $3.50 per user per month, Plan 2 at $5.25, Plan 3 at $8.00, and Plan 4 at the top - with a large set of capabilities licensed as their own modules on top. That means you can start narrow and add exactly what you need, but it also means a quote is genuinely a configuration exercise rather than picking a tier off a page.

The separately licensed modules our distributor lists include Spam and Malware Protection, Advanced Threat Protection, Continuity Service, Archiving and Archive Export, Email Encryption, Signature and Disclaimer, 365 Total Backup, 365 Permission Manager, DMARC Manager, Teams Protection, AI Recipient Validation, AI Email Security Analyst, Security Awareness Service, S/MIME certificate procurement and maintenance, Hornet.email hosted mailboxes, VM Backup with optional multi-year software maintenance, and 365 Multi-Tenant Manager for MSPs banded by tenant count. Several of these are also folded into the higher plan tiers, so the cheapest route to a given capability set is worth working out rather than assuming.

On the protection side, spam and malware filtering, signature-based and heuristic detection, and Advanced Threat Protection sandboxing inspect inbound mail before it reaches a mailbox. URL Rewriting and URL Malware Control rewrite links so destinations are re-checked at click time, which catches weaponized links that were clean when the message was delivered. Malicious Document Decryption opens password-protected attachments using passwords found in the message body so encrypted payloads cannot slip past inspection.

Targeted-attack defenses handle what plain spam filtering misses. Fraud attempt analysis, identity spoofing detection and executive-impersonation checks look at sender behavior and display-name patterns rather than attachment signatures, which is what business email compromise relies on.

Continuity matters as much as filtering for smaller teams. Email Live Tracking gives administrators a searchable, real-time view of every message and the reason it was allowed, quarantined or rejected, and the Continuity Service Emergency Inbox keeps mail flowing when Microsoft 365 itself is unreachable.

365 Total Backup covers Exchange Online mailboxes, OneDrive, SharePoint and Teams data - relevant because Microsoft's shared responsibility model does not cover long-term recovery of tenant data that a user or attacker deleted. Security Awareness Service closes the loop on the human layer with automated phishing simulations and training assigned by an Employee Security Index.

Deployment is connector-based against the Microsoft 365 tenant. Billing is a recurring monthly subscription charged per user in arrears.