Material Security
Email, file and OAuth-app security for Google Workspace and Microsoft 365
Overview
Material Security protects Google Workspace and Microsoft 365 — inbound email threats, phishing-report triage, account-takeover containment, posture checks — plus OAuth-app and shared-drive security on Google Workspace. From $4 per user a month billed annually; historical-mailbox protection is the ATO Resilience add-on.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 1 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- Automated inbound email threat detection and response
- Automated agent for user-reported phishing
- OAuth app inventory and file metadata
- Posture management
- Agent to investigate and remediate OAuth grants
- Sensitive content in Shared Drives and email
- Anomalous behaviour detection
- Enhanced identity risk detections
- Categorise sensitive data at rest in mailboxes
- Message-level MFA for historical sensitive email
- Unlimited email content retention
- Custom scope
- Volume discounts
- Dedicated single-tenant deployment option
Use cases
What you can produce with Material Security
- Inbound email threat detection and response for Google Workspace and Microsoft 365
- Automated agent for triaging user-reported phishing
- Account-takeover containment with message-level MFA (ATO Resilience)
- OAuth app inventory and remediation agent (Google Workspace)
- Shared-drive sensitive-content and oversharing detection (Google Workspace)
- Posture management against CIS, NIST and Material benchmarks
- Shared and dedicated (single-tenant) deployment options
Material Security covers more of the cloud office than a standard inbound filter: email threat detection and an automated phishing-report agent, account-takeover containment, posture checks against CIS and NIST, and on Google Workspace an OAuth-app inventory with an agent that revokes risky grants and monitoring of shared-drive oversharing. Its best-known idea — locking down years of old mail so an attacker who gets in finds nothing to mine — is real, but it lives in the ATO Resilience add-on ($3 per user, or $5 alone) rather than in every plan. Pricing is refreshingly public: $4 per user a month for Essentials and $6 for Advanced, billed annually, plus a shared-drive storage fee, with a self-serve trial. Note that some modules are Google-only. Best for mid-sized and larger organisations on Google Workspace or Microsoft 365 with a security team to act on what it finds.
What we found
Material Security protects the cloud office rather than only the inbox. For Google Workspace and Microsoft 365 it detects and removes inbound email threats, runs an automated agent that triages phishing reports from users, contains account takeovers, and checks tenant settings against CIS, NIST and its own benchmarks. For Google Workspace it also inventories third-party OAuth apps — with an agent that investigates and revokes risky grants — and monitors files in shared drives for oversharing and sensitive content. Its 2026 marketing adds controlling "agent and app access" to that list, and an MCP server appears in its plan comparison.
The idea it is best known for, protecting the years of old mail an attacker could mine after a breach, is real but sits mainly in an add-on. ATO Resilience categorises sensitive data at rest in mailboxes, audits historical sensitive email and can demand a second MFA step before anyone opens it, with unlimited email retention for investigation.
Pricing is published, which is unusual in email security. Essentials costs $4 per user a month and Advanced $6, both billed annually, plus a minimum annual fee for up to 1 TB of shared-drive data and usage-based pricing above that. Advanced adds sensitive-content detection in drives and email, anomaly detection and the OAuth remediation agent. ATO Resilience is $3 per user as an add-on or $5 alone. Service accounts are free, shared mailboxes are billed at the full rate, and enterprise discounts come through sales. There is a self-serve trial, and customers can choose a shared or a dedicated single-tenant deployment.
Material was founded in 2017 by Ryan Noon and Abhishek Agrawal, both early Dropbox staff; Noon is now chairman and Agrawal chief executive. It last raised in 2022, a $100 million Series C led by Founders Fund at a $1.1 billion valuation, taking its total to $166 million, with Andreessen Horowitz and Elad Gil among earlier backers. Customers it names include OpenAI, Figma, Mars, Lyft and MassMutual. We could not read G2 or Trustpilot today, so we report no ratings.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including Material Security's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Material Security unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Material Security directly →
Spotted something out of date? Suggest an update →
Alternatives to Material Security
More in Security & Safety
