Proofpoint

What is Proofpoint?

Proofpoint is an enterprise email security platform that uses machine learning and threat intelligence to detect and block advanced email threats before they reach end users. Its detection capabilities are particularly strong against targeted attacks: spear phishing, business email compromise, and supplier fraud scenarios that evade traditional rule-based filters by mimicking legitimate communication patterns. Proofpoint's Very Attacked People feature identifies the specific individuals within an organization who are most frequently targeted by external threat actors, allowing security teams to apply enhanced controls to high-risk users. The platform also includes data loss prevention capabilities for outbound email, and its Threat Intelligence feed provides IOCs and attribution data linked to the campaigns it detects across its global customer base. Detailed message trace logs capture the full delivery and engagement history for every email processed.

How does Proofpoint work with Qevlar?

Qevlar integrates with Proofpoint to retrieve email threat data and message logs during phishing and BEC investigations. When an alert involves a targeted email campaign, Qevlar can query Proofpoint to identify all affected users, retrieve attachment and URL verdicts, and determine whether the campaign is linked to a known threat actor tracked in Proofpoint's intelligence database.