InboxGuards is a self-service email security monitoring product for small businesses. It connects to Google Workspace with read-only access to supported audit records, checks them approximately every 5 minutes, and alerts when configured account-takeover signals appear. Provider ingestion delays and API coverage still apply.

This is an alarm, not a watch service. It does not sit between you and an attacker. It does not promise to catch every incident. The monitoring subscription does not administer or remediate customer tenants. Hands-on remediation exists only as an optional, separately authorized $199 service.

What it uses from Google:
- admin.reports.audit.readonly — read supported Admin SDK audit records (login, token, admin, user accounts, drive, mobile).
- admin.directory.user.readonly — read user directory records for 2-Step coverage posture.

InboxGuards does not read or send mail. It does not change MX records. $2 per active user per month, or $20 per user per year. 30-day money-back. Owned and operated by Orion CMD LLC in Omaha, Nebraska.

After a Workspace admin installs this app, they still need an InboxGuards account at inboxguards.com to receive alerts and billing. Google Workspace Marketplace Install is the domain permission grant; it is not a substitute for paid monitoring.