SECULETTER FILM · DISARM

Sanitize the threats coming in,
and train people for the real thing.

Email security has two gaps — weaponized attachments, links and impersonation that slip past the front line, and the person who opens them. See how DISARM closes both.

  • 34ms Per-file sanitization CDR processing time
  • 309+ Supported file formats HWP · PDF · DOCX · XLSX · images · archives
  • Minutes To deploy M365 · Google Workspace API · no MX change
  • Gartner Email security vendor listing The only Korean company among 40 vendors
WHAT YOU SEE

Blocking only one side leaves a gap.

Weaponized attachments and links are removed by sanitization, impersonation mail is caught by detection, and the person making the final call is trained through simulation. The film shows how the three fit together.

SANITIZE · CDR

Remove the risk without knowing what it is

Zero-trust sanitization. Before deciding whether anything is known malware, active content such as macros, scripts, OLE and URLs is stripped out and the document is rebuilt. Tables, formatting and fonts stay as they were.

DETECT · BEC

Dangerous mail with no attachment at all

Look-alike domain impersonation, monitoring of key recipients and trusted domains, and fraud keyword analysis catch impersonation mail — including mail moving laterally inside the organization.

TRAIN · PHISHING SIMULATION

Block it with technology, finish it with people

Phishing simulations built on real attacker patterns train employees, lower click rates and identify vulnerable users — covering the last judgment call that technology alone can miss.

FAQ

Sanitization and simulation — common questions.

  • Do we have to change our mail system?

    No. DISARM connects directly to the Microsoft 365 and Google Workspace APIs, so there is no MX record change. Deployment finishes in minutes while your existing mail flow stays as it is, with no extra hardware.

  • How does it stop unknown, new threats?

    Rather than deciding whether something is malicious and then blocking it, DISARM removes the executable elements themselves. With macros, scripts, OLE and URLs stripped out before the document is rebuilt, even unidentified threats cannot run.

  • Does it catch impersonation mail with no attachment?

    Yes. Look-alike domain detection, monitoring of key recipients and trusted domains, and fraud keyword analysis identify BEC-type mail and sort suspicious messages automatically. Internally sent mail is checked too.

  • Doesn't it overlap with the mail security we already have?

    It complements rather than replaces it. Built-in security such as Microsoft Defender focuses on verdicts; DISARM adds a layer that removes risky elements before any verdict. The two layers work together.

  • Can we verify it before adopting?

    Yes. A PoC or BMT lets you check sanitization quality and processing speed in your real mail environment. Once you request one, our team works out the scope and schedule with you.

Read the full narration 24 scenes · text version

Presenter The most common threat coming into your company isn't a sophisticated hack. It's the email piling up, hundreds a day.

Graphic More than 75 percent of all malware arrives by email. And 99 percent of those attachments aren't executables — they're the documents we open every day.

Presenter In the end it's after one click. One click, and your internal network is open.

Graphic Email security has two gaps. One is what gets past the front door — weaponized attachments, links, impersonated senders. The other is the judgement of the person who opens it. Close one and you still get through.

Presenter SecuLetter's cloud email security closes both gaps at once. Incoming threats are sanitized before they land, and your people are trained on the patterns attackers really use.

Graphic As email moved to the cloud, security had to move with it. You used to put an appliance in front of the mail server and change your MX record. Now it attaches directly to the cloud mailbox through an API. That integrated approach is called ICES — Integrated Cloud Email Security.

Graphic SecuLetter DISARM works exactly this way. Microsoft 365 or Google Workspace, no appliance and no messy setup — it connects instantly by API, anywhere in the world.

Screen At the core of DISARM is content disarm and reconstruction. It strips macros, JavaScript, hyperlinks and OLE objects, then rebuilds the file as it was. A clean file lands in the user's inbox, and the original is kept separately in the DISARM backup folder. The recipient just opens the file as usual.

Graphic Sanitization covers attached documents, images and the email body itself — more than 309 formats in total. We hold more sanitization patents than anyone else in Korea. And password-protected archives are opened and inspected too.

Screen Sanitization isn't one size fits all. You can set policy by department. Teams that genuinely need macros or scripts are allowed them, while everyone else receives only clean files — tuned to how each group actually works.

Graphic Some attacks are dangerous without any attachment at all. Business email compromise — impersonating an executive or a supplier. DISARM catches lookalike domains that change a single character, watches registered key recipients and trusted domains, and analyses the phrasing fraud emails rely on to sort suspicious mail automatically.

Graphic And DISARM doesn't only look at mail from outside. In one customer's real data, 53 percent of all mail in flight was internal. When one account falls, phishing spreads inside the organisation — and that blind spot is covered too.

Graphic All of this sanitization takes 34 milliseconds per file. Users feel no delay. SecuLetter is named in Gartner's email security research, and it runs alongside built-in protection like Microsoft Defender rather than replacing it.

Presenter So DISARM filters everything from weaponized attachments to impersonated senders. But some phishing carries no malware at all — it targets only a person's judgement. That one you stop by training your people.

Screen So, second: email phishing simulation. Not textbook examples — we put the same patterns real attackers use straight into the training your people see.

Screen Impersonating a tax office or a delivery company. A password-expiry warning. An unpaid invoice. A failed-delivery notice. An internal instruction that looks like it came from your boss. And a payroll spreadsheet carrying a malicious attachment. Six techniques that actually work in the field.

Screen Running it is simple. Pick your targets by department or team, choose a template, set the send schedule, and the campaign goes out.

Screen Results come back as open rates and click rates. You can see exactly who clicked and which users are vulnerable, and by repeating campaigns you can compare how training is improving quarter over quarter.

Graphic Request it, set up the environment, pick a template and send, then review the results. Four steps, and you're running — with nothing to install.

Graphic To sum up. Incoming threats are sanitized by DISARM, and human judgement is sharpened by simulation. Technology and people — two layers protecting your email.

Screen And once it's running, the DISARM dashboard shows the statistics for every sanitized file at a glance. You'll see exactly how many unused macros and scripts have been arriving at your organisation every single day.

Presenter Both are cloud-based, so if you're on Microsoft 365 or Google Workspace you can start immediately, with nothing to install. See the sanitization statistics from your own mail environment for yourself.

Screen DISARM is also listed on the Microsoft Marketplace, ready to deploy.

Presenter Request it now and you can try it free for a month. Get started at seculetter.com.

NEXT STEP

What you saw in the film,
try it in your own inbox.

Verify sanitization quality and processing speed in your real mail environment through a PoC or BMT. Our team works out the scope and schedule with you.