Automated post-delivery quarantine and message removalIncluded capability
Current Core sources explicitly include automated remediation; this does not establish the separate TRAP appliance as included.
Plan: Core Email Protection: Included
BEC, impersonation, and lookalike-message detectionIncluded capability
No separate current Core plan named Impostor Email Protection is published; broader domain, supplier, and takedown scope is separate.
Plan: Core Email Protection: IncludedImpostor email classification
Configurable secure email gateway deploymentIncluded capability
Current Core packages the SEG deployment choice; Email Protection remains a technical service identity and is not returned as another plan.
Plan: Core Email Protection: IncludedProofpoint Email Protection service
Malicious URL and attachment analysis with sandboxingIncluded capability
Core publishes sandboxing for malicious URLs and attachments. TAP remains a current technical service identity but is not a second Core plan.
Plan: Core Email Protection: IncludedTargeted Attack Protection (TAP) technology
Pre-delivery, post-delivery, and click-time email protectionIncluded capability
The current Core brief explicitly coordinates all three lifecycle stages.
Plan: Core Email Protection: Included
Rapid API email protection deploymentIncluded capability
Microsoft 365 uses Graph API; exact Google Workspace and Exchange architecture differs and should be validated.
Plan: Core Email Protection: IncludedMicrosoft 365, Google Workspace, and supported Exchange architectures
Broad cloud-account takeover investigation and remediationSeparate product
Core includes email-focused lateral-phishing and account-takeover signals; Tier 2 adds the broader cloud-account product scope.
Proofpoint Account Takeover Protection
DMARC, supplier, and domain impersonation protectionSeparate product
Core detects BEC and lookalike messages, while hosted authentication, supplier context, domain monitoring, and broader impersonation remediation extend beyond the base offer.
Proofpoint Email Fraud Defense and Collaboration Security Prime
Emergency email continuity and temporary message storageSeparate product
Continuity remains a separately identified service and is also bundled in other offers; current Core packaging does not state inclusion.
Proofpoint Continuity
Long-term communications archiving and e-discoverySeparate product
Archive is separately named and is not established as a Core entitlement.
Proofpoint Archive
Managed email threat protection and optimizationSeparate product
Managed expertise, operational checks, and executive reporting are service scope, not automatic Core software entitlement.
Proofpoint Managed Email Threat Protection
On-premises incident management and email auto-pullSeparate product
TRAP is currently identified as an on-premises incident-management product; Cloud Threat Response is its separately identified SaaS counterpart.
Proofpoint Threat Response Auto-Pull (TRAP)
Rule-based and behavioral email data loss preventionSeparate product
Integrated outbound protections on the Core page do not establish broad DLP or encryption entitlement.
Proofpoint Email DLP and Encryption and Adaptive Email DLP
SMB and MSP email security with optional continuity and archivingSeparate product
Essentials continues to operate while Proofpoint prepares an optional upgrade path to the Hornetsecurity platform; neither is a Core edition.
Proofpoint Essentials and Proofpoint 365 Total Protection
Threat-guided training and phishing simulationsSeparate product
Core includes in-message coaching and user reporting, not the broader training and simulation program.
Proofpoint ZenGuide and Collaboration Security Tier 3
Security and identity ecosystem connectionsThird-party integration
The integrations are named for Core, but destination licensing, edition, and configuration requirements remain separate.
Plan: Core Email Protection: IncludedMicrosoft Defender, CrowdStrike, Okta, Palo Alto Networks, Splunk, and Microsoft Sentinel