Monitored mailbox statuses

Overview

Users of Stoïk Email Security can now access a complete list of all monitored mailboxes directly in Stoïk Protect.

This new view gives you full visibility into the mailboxes being analyzed for Business Email Compromise (BEC) indicators and whose inbound and outbound traffic is monitored for signs of potential fraud.

Each monitored mailbox now includes key details to help you track and understand its status at a glance:

• User

• Email address

• Type

  • User — Personal mailbox, assigned to one person.

  • Shared — Mailbox used by several people, with no single owner.

• Associated tenant

• Suspicious emails Status

  • Active — Incoming and outgoing emails are being analyzed.

  • Inactive — Emails on this mailbox are not being analyzed.

• Compromised accounts Status

  • Active — Enough sign-in history to detect unusual account behavior.

  • Analyzing — Still gathering sign-in history. Detection is on, but not at full precision yet.

  • Dormant — Too little recent activity, so detection precision is reduced.

If a mailbox becomes Inactive, simply hover over the status to see the reason — making it quick and easy to identify and troubleshoot the issue.

Why It Matters

• Visibility: Know exactly which mailboxes are being actively protected by Stoïk Email Security.

• Clarity: Understand instantly why a mailbox might be inactive, with contextual explanations.

• Efficiency: Reduce support requests and investigation time with self-service transparency.

How It Works

1

Access the Mailboxes List

In Stoïk Protect, navigate to Email > Mailboxes.

You’ll see a list of all mailboxes currently monitored by Stoïk Email Security.

2

Review Mailbox Details

For each mailbox, the following information is displayed:

• User: The associated account owner.

• Email address: The exact monitored address.

• Tenant: The Microsoft 365 tenant linked to the mailbox.

• Type: Whether the mailbox is a User or Shared mailbox.

• Suspicious emails : Indicates whether the mailbox detection is Active or Inactive.

• Compromised accounts : Indicates whether the account detection is Active, Analyzing or Dormant

3

Check the Mailbox Type

The Type column shows how each license is configured, so you don't have to guess:

• Microsoft 365: pulled directly from the mailbox's configuration in Outlook (user vs. shared). If a client asks why a mailbox shows as User or Shared, point them to their Outlook configuration.

• Google Workspace: the same distinction is available, but the logic differs. A mailbox showing as Shared on Google is usually a "Group" with individual mailboxes assigned to it, not an Outlook-style shared mailbox setting.

The way this data is retrieved for Google shared mailboxes recently changed, so historical user/shared data isn't available for Google tenants from before the change: it populates going forward. Microsoft 365 tenants have full historical data.

4

Check Inactive Mailboxes

If a mailbox is marked Inactive, hover over the status to view the reason — for example:

• Connection expired

• Access revoked

• Temporary sync issue

This makes it easy to identify configuration or permission problems without contacting Stoïk support.

What’s New

Improvement	Description
Mailbox visibility	View the full list of mailboxes monitored by Stoïk Email Security directly in Stoïk Protect.
Status details	Hover over inactive mailboxes to see the cause and take action.
Centralized monitoring	Easily track users and tenants under active email protection.
Reduced support dependency	Diagnose inactive mailboxes quickly and independently.