Trust, Verify, Protect: Modernizing Email Security for the Cloud
KnowBe4, Thursday, July 16th, 2026
KnowBe4 argues legacy secure email gateways are obsolete and that cloud email defense must become identity-first.
Dr. Kawin Boonyapredee argues traditional Secure Email Gateways no longer work because the perimeter has dissolved in Microsoft 365 and Google Workspace environments.
He identifies session hijacking that bypasses MFA, credential stuffing, and domain spoofing as the dominant threat vectors facing cloud mailboxes.
Rather than scanning attachments, he says modern defense requires behavioral analysis wired into the identity provider to baseline normal activity and flag anomalies.
The post recommends four steps: API-based integration inside the cloud email platform, dynamic behavioral baselines, continuous risk-based authentication, and vendor risk profiling. The framing applies Zero Trust by treating every message as an identity assertion rather than as data.