Mailbox exposure · examined

If they get in, there’s nothing to take.

Husk finds what an attacker would take from your inbox, then makes sure it isn't there.

An empty split huskFine line illustration of a hollow seed casing opened along its centre.
Fig. 001 Empty casing, examined in cross-section
Begin examination
Plate I

Every inbox is a collection.

Most email security tries to keep attackers out. That remains useful, until one gets in anyway.

The mailbox is already full of reset links, recovery codes, ID scans and live payment threads. It is an orderly record of what to take next.

The perimeter is not the last place worth looking.

Plate II

Specimens of exposure.

Specimen no. 0412EXPOSED

Password reset link

linkedin.com · received 14 Mar 2026

Status
EXPOSED
Still valid
YES
Unlocks
PROFILE
Risk
8 / 10

Sample specimens. Every finding is examined, catalogued and given a status.

Plate III

Try to take something.

Sample mailbox · read onlyAttempt 1 / 3

You’re in. Take whatever you can.

Four likely searches. No useful result.

Nothing worth taking. That’s Husk.

A demonstration using sample data. Nothing entered here is sent anywhere.

Plate IV

Examine. Catalogue. Empty.

01

Examine

Read-only, looking through the mailbox the way an attacker would.

02

Catalogue

Score the exposure and show which other accounts the inbox unlocks.

03

Empty

Remove, vault or rotate what should not remain in the mailbox.

72Critical
9Clean

Illustrative exposure score, before and after remediation.

Plate V

For the inboxes you manage.

Multi-tenant by design. Simple to price per client. Quick to run across every client you manage.

Collection scope
01

Microsoft 365

Mailbox examination
02

Google Workspace

Mailbox examination
03

Every client

One ordered view

Built for MSPs and IT leaders at small and mid-sized businesses.

Accession · 001

We’re working with a small number of early partners.