Stop the fake invoice before finance pays it
For businesses where one email can move money: finance, procurement, directors. Armor Mail is Cloudflare's email security, set up, tuned and watched by our engineers. It catches the supplier address one letter off, the “new bank details” inside a real thread and the fake Microsoft login, and holds them before anyone acts.
$12 a month for ten mailboxes, $1.20 each. Works with Microsoft 365, Google Workspace or your own mail.
Pay by
- Tariro, Supplier Ltdaccounts@supplier.co.zwStatement for OctoberDelivered
- Board secretarysecretary@yourcompany.co.zwMinutes from TuesdayDelivered
- Accounts, Supplier Ltdaccounts@supp1ier.co.zwRE: Invoice 2231, updated bank detailsQuarantined
- Lookalike domain: supp1ier, not supplier
- New bank details inside an existing thread
- Sender domain first seen today
- 4.6 out of 5 from Google Reviews
- 13,000+ domains on Tremhost infrastructure
- Cloudflare partner, signed 2026
- No MX change for Microsoft 365 and Google Workspace
Invoice fraud is how money actually leaves a business
Nothing about the fraudulent message looks wrong, because nothing is wrong until the account number. The thread is real, the people are real, and procurement is doing its job.
Today
- The thread is real: same people, same subject, same friendly sign-off
- Procurement pays the “updated” account because nothing looked wrong
- The money moves cross-border within hours and recovery is rare
- A spam filter lets it through, because it was built to catch bulk junk, not one careful message
With Armor Mail
- Lookalike senders and new bank details in old threads are held for review
- Finance sees only mail that has been checked
- A compromised supplier mailbox is flagged before its thread is used on you
- We release false positives, so real supplier mail still arrives
What one fake invoice costs, against Armor Mail
Enter how many mailboxes you would protect and the size of a typical supplier payment. The starting values are only an example.
- Armor Mail
- 1 pack, $12 a month
- Yearly, two months free
- $120 a year
- Microsoft Defender Plan 1
- $20 a month, you configure it
- One diverted payment pays for
- About 41.7 years of Armor Mail
Armor Mail = $12 per ten mailboxes, rounded up to whole packs; yearly = packs × $120. Defender = $2.00 × mailboxes (Microsoft, paid yearly, checked 2 November 2026). For scale: the FBI's Internet Crime Complaint Center recorded 24,768 business email compromise complaints in 2025 with $3,046,598,558 in reported losses, about $123,000 a complaint (IC3 2025 report). Those are US complaints, not Zimbabwean ones.
Less than Microsoft's add-on, and managed
Microsoft's nearest equivalent is Defender for Office 365 Plan 1, which you configure and monitor yourself. Cloudflare doesn't publish a self-serve price for its email security.
| What you want | Defender Plan 1 | Armor Mail |
|---|---|---|
| 10 mailboxes | $20 a month | $12 a month |
| 25 mailboxes | $50 a month | $36 a month (3 packs) |
| 50 mailboxes | $100 a month | $60 a month (5 packs) |
| Tuning against your mail flow | Your IT team | Included |
| Quarantine management | Your staff, daily | Included |
Ten mailboxes40% less$12 against $20 a month, with the tuning and quarantine done for you
Microsoft lists Defender for Office 365 Plan 1 at $2.00 a user a month, paid yearly (microsoft.com, checked 2 November 2026). ($20 − $12) ÷ $20 = 40%.
What the ten-pack includes
Everything below is in the $12, and each line says what it changes for you.
- Phishing links stripped before deliveryA fake Microsoft login page never reaches the person most likely to type a password into it.
- Business email compromise and fake-invoice detectionThe message asking finance to pay a “new” account is held before anyone acts on it.
- Lookalike domains and display names caughtsupp1ier.co.zw pretending to be supplier.co.zw is spotted by software, not by a tired person at 4pm.
- Warnings when a supplier's mailbox looks compromisedYou hear when a real supplier has been hacked, before their attacker uses the thread on you.
- Malware and weaponised attachments blockedInfected invoices and “statements” are removed before they open on a finance laptop.
- API or in-line deployment, no mail downtimeFor Microsoft 365 and Google Workspace there is no MX change, so mail keeps flowing during setup.
- Two weeks of tuning on your real mailNothing is blocked until the rules fit your suppliers and clients, so real mail isn't lost.
- Quarantine handled by usFalse positives are our problem to release, not your staff's daily chore.
- Monthly reportYou see what was caught and who was targeted, which tells you where to train.
Trusted by businesses since 2016
Source: Tremhost's Google Business Profile. Read all reviews on Google
These guys have the best support and customer service, they are always available for support, I highly recommend.
Tremhost provides excellent all-around service as well as speedy customer support. I strongly recommend them.
Great company for sites. I have been working with these guys for years. Keep up
CILT Zimbabwe
Professional institute, Harare
Membership, events and the WiLAT community on one site that Tremhost has run since 2021.
Read the storyBuildware
Decorative panels and cabinet hardware, Harare
A client since 2017: a product catalogue with WhatsApp quotation requests and SEO built around trade terms.
Read the storySpecialist Junior School
Private primary school, Ruwa
A school website parents use and pupils publish on, with an events calendar for term dates and fixtures.
Read the story
Pay monthly or yearly in US dollars
EcoCash, InnBucks, ZimSwitch, Omari, Visa, Mastercard, Bitcoin, Tron, Litecoin, bank transfer or cash at our Harare office. Annual billing gets you two months free. If a payment doesn't go through, message us on WhatsApp.
Questions people actually ask
Still unsure? Ask us on WhatsApp or book a call.
Does this work with Microsoft 365 and Google Workspace?
Yes, both, and with mailboxes hosted at Tremhost. For Microsoft and Google it deploys by API, which means no MX record change and no interruption.
Will we lose legitimate mail?
That is what the two-week monitoring period is for. We tune against your actual mail flow before anything is blocked, and we manage the quarantine ourselves so a false positive is our problem, not your staff's.
Is it cheaper than Microsoft's own add-on?
Yes. Microsoft lists Defender for Office 365 Plan 1 at $2.00 a user a month, paid yearly, which you configure and monitor yourself. Armor Mail is $12 a month for ten mailboxes, $1.20 a mailbox, with the tuning and quarantine handled for you.
We already have spam filtering. Isn't this the same?
No. Spam filters catch bulk junk. Invoice fraud arrives as one well-written, personally addressed message inside a real thread, which is exactly the kind of mail a spam filter is designed to let through.
What if someone clicks anyway?
Tell us immediately. We help contain it: reset credentials, check for forwarding rules the attacker set, and look at what else in the mailbox was touched.
How many mailboxes do we need to protect?
At minimum, the ones that receive invoices and the ones that can authorise payment. In most businesses that is finance, procurement, the directors and reception. Ten covers a typical small office.
How do I pay?
Monthly or yearly in US dollars, by EcoCash, InnBucks, ZimSwitch, Omari, Visa, Mastercard, Bitcoin, Tron, Litecoin, bank transfer or cash at our Harare office. Annual billing gets two months free: $120 a year per ten mailboxes.
Related protection
Mail stops the message. These protect the account, the device and the website.
Business email hosting
Need the mailboxes themselves?
Professional email on your own domain, hosted by Tremhost.
Armor Workforce
Stop data leaving through staff accounts.
Zero Trust access, web filtering and data-loss controls. $5 a person a month.
ESET endpoint security
Stop the attachment that does get opened.
Antivirus and ransomware protection per device, from $16.50 a year.
All Armor plans
Protect your website too.
Guard, Shield, Workforce, Network and Mail, with prices against buying direct.
Make the next fake invoice somebody else's problem
Lookalike suppliers, new bank details in old threads and fake logins, held before your staff act on them. $12 a month for ten mailboxes, tuned and watched by us.