Email Security
Your Email Just Got Smarter
KeyStone Solutions has upgraded your email protection with advanced AI-powered security. This page has everything your team needs to understand the new experience.
What's New
What's Changed?
Your email is now protected by Inky, an advanced email security platform that uses AI to detect phishing, impersonation, and social engineering attacks in real time. You'll see new warning banners on incoming emails that help you and your team make better decisions about which messages to trust.
Nothing about your email address, login, or daily workflow changes. The protection runs behind the scenes — the banners are the only visible difference.
How It Works
360° Email Monitoring
Inky watches all three directions your mail travels — not just what arrives from outside.
Inbound Mail
Every message arriving from a sender outside your organization is analyzed for phishing, malware, domain spoofing, and social engineering.
Internal Mail
Messages between colleagues inside your organization are scanned too — a compromised coworker's account is a real threat, not a hypothetical one.
Outbound Mail
Mail you send gets checked as well, so a threat is never unknowingly forwarded on to a coworker or client.
Where Your Mail Ends Up
Inky analyzes each message and tells Microsoft 365 how risky it is. Microsoft then decides where the message is delivered:
| Where it lands | What goes there | What you can do |
|---|---|---|
Your inbox | Clean mail, plus caution-flagged mail that isn't spam. Mail from colleagues and trusted partners arrives here too. | Read it — use the banner as context before you click anything. |
Junk folder | Spam and high-confidence spam. | Move it back yourself, no admin needed. Report it as Safe so future messages from that sender route correctly. |
Microsoft quarantine | Confirmed phishing, malware, and other high-confidence threats — held before delivery so they never reach your mailbox. | See what's being held at security.microsoft.com/quarantine. To get one released, submit a ticket. |
What you'll see in Microsoft's quarantine
- The subject, sender, and date
- Why it was quarantined — Spam, Phish, and so on
- A Release or Request Release button, depending on your permissions
- A preview option, so you can look at a message safely
Getting a quarantined message released. Microsoft emails you a digest of what's being held. Junk is yours to manage, but phishing and malware need a KeyStone admin to review the request and approve or deny it. Anything we release is re-analyzed by Inky first, so it still arrives with its banner attached.
Everything you act on is in your inbox. There's no Inky portal to log into. The banners, the reporting links, and your Junk folder all live in the mail client you already use.
The riskiest mail never reaches your mailbox. Confirmed phishing and malware is held in Microsoft's quarantine before delivery. Spam lands in your Junk folder, where you can move it back yourself.
Banner Guide
Understanding the Banners
New colored banners will appear at the top of some incoming emails. Here's what they mean:

This email passed security checks. No action needed — proceed normally.

Something about this email is unusual. Review the sender's address carefully before clicking any links or opening attachments.

This email has strong phishing or impersonation indicators. Do not click links, do not open attachments, do not reply. Report it immediately.
Internal vs. external, at a glance. Mail from colleagues inside your own organization always carries a blue banner. Safe mail from someone outside your organization carries a gray one — so you can tell the two apart without squinting at the address.
Reporting
How to Report a Suspicious Email
If you receive an email that looks suspicious — with or without a banner:
- 1
Don’t click any links or open attachments
- 2
Don’t reply to the sender
- 3
Click the Report This Email link in the Inky banner at the top of the message
- 4
Choose how to classify it — Safe, Spam, or Phishing — then confirm your choice in the pop-up that appears
- 5
If there's no banner, forward the email to: service@keystone.solutions
Our security team reviews every report and will take action if needed.
Want to know why a message was flagged? Click Detailsin the banner. A browser tab opens with Inky's full analysis of the message.
Know the Difference
Spam vs. Phishing
Both are worth reporting, but they aren't the same thing — and Inky handles them differently.
Bulk email you don't want to keep receiving. Report it as Spam and future messages from that sender go straight to your Junk folder.
Any email trying to get you to hand over information or click a malicious link. Report it as Phishing and the message is moved to your Deleted Items folder.
Wondering about graymail — the newsletters and notifications that aren't quite spam? See the Graymail User Experience guide.
Training
Training Videos
FAQs