Example for 2,500 mailboxes. Turn on JavaScript to use your own numbers.
- To:
- CISO
- Subject:
- Proposal: a 14-day trial to measure what reaches our inboxes
I’d like to run a 14-day trial of StrongestLayer, an email security tool for Microsoft 365 and Google Workspace, to measure two things in our own mail: threats that get past our current filters, and analyst time spent on reported emails.
At a law firm on Microsoft 365 E5 plus a gateway, StrongestLayer’s 10-day assessment projected 12,666 threats a year reaching inboxes. Scaled to our 2,500 mailboxes, that’s roughly 6,300–12,700. Our setup differs, so this is a starting point, not a forecast.
We investigate an estimated 83 user-reported emails a week (I’ll confirm the real number in week one): about 28 hours, assuming 20 minutes each. At that law firm, investigation time fell 80% in the first weeks and, within three months, from 660 to 8 minutes a day. A similar change would give back about 27 hours a week, roughly 0.7 of a full-time analyst.
- 6,300–12,700estimated threats a year reaching inboxes
- 27estimated analyst hours saved a week
- 0.7of a full-time analyst back (estimate)
- 15 minsetup, no MX changes
It connects through the Microsoft 365 or Google Workspace API in about 15 minutes, with no MX changes, alongside our current gateway. According to StrongestLayer, our email isn’t used to train models or kept after a clean verdict.
If you agree, I’ll set it up and report back after 14 days with what it found and the time it saved.
Sources: StrongestLayer law firm case study, Oct 2025, and its 2026 update.