TrustLayer
☾ Book a demo
Platform architecture

DirectProtect™

Protect more. Change less.

Keep email and web secure without getting in the way. Traffic stays on its original path. Rollout is quick. Day to day is simple.

What is DirectProtect?

The architecture that removes detours and bottlenecks.

DirectProtect is the architecture behind TrustLayer's Browse and Mail that removes detours and bottlenecks. It delivers protection where it matters without rerouting traffic or interrupting how your people work.

The result is fast deployment, clear control and security that keeps up with your business.

One approach for email and web
Built for mid-market organisations
Simple to run. Powerful when you need it
What's different?

Most security tools add detours and delays. DirectProtect keeps traffic moving, securely.

Policies apply at the right point in the flow, visibility is complete, and performance stays consistent. You get the scale of the cloud with the certainty of direct control.

No traffic detours
Fast to roll out
Integrates seamlessly
DirectProtect Mail

Protect M365 emails the direct way.

Email security shouldn't break your mail flow. DirectProtect Mail is the architecture behind TrustLayer Mail, keeping Microsoft 365 on its original path and applying protection in the flow.

There are no MX record changes and setup takes minutes, so delivery stays in your control while protection covers inbound, outbound and internal messages. Everyday mail keeps moving and your team stays focused.

Protect against
Phishing, BEC and impersonation
Malware and ransomware
Risky links and attachments
Internal mail abuse
Mail flow disruptions
How it works
01
Keep the original route

Mail keeps its Microsoft 365 path. There are no MX record changes or DNS edits. We add protection where mail already flows, so delivery stays in your control.

02
Inspect in the flow

Messages are evaluated as they travel. Links, attachments and intent signals are checked together so clean mail moves on without delay.

03
Protect every direction

The same policy applies to inbound, outbound and internal messages, which keeps coverage consistent and evidence clear.

04
Choose what happens to suspect mail

You decide where it goes. Hold it in TrustLayer Quarantine or use the native Microsoft 365 Junk folder. Users can act through the Outlook add-in when you want them to.

05
Set up in minutes

A guided wizard gets you running in minutes. You can test safely, switch on, and keep a simple path back if you need it.

06
Roll back with confidence

Because protection runs in the flow, changes are easy to test and undo. Admins use Microsoft Transport Rules to keep things consistent across the tenant.

Explore TrustLayer Mail →
DirectProtect Browse

Make browsing safer, not slower.

Keep browsing secure without changing how traffic moves. The architecture behind TrustLayer Browse, it enforces policy direct to devices, so traffic follows its original path to the internet and cloud apps.

There's no proxy and no plugins to manage. Performance stays steady on and off the network, while you keep clear visibility and control.

Protect against
Phishing sites and credential theft
Malware, ransomware and drive-by downloads
Risky categories and inappropriate content
Shadow IT and unsanctioned cloud apps
Data loss through web uploads and file sharing
How it works
01
Enforce in place

Policy is evaluated on the device as people browse, so clean traffic keeps moving.

02
On and off network

The same controls travel with the user, wherever they are.

03
App-aware control

See the apps in use, allow what's needed, and govern the actions users can take inside them.

04
Simple rollout and testing

Set up quickly, test a change with confidence, and push it when you are ready.

05
Privacy and performance

No proxy detour means source IPs are preserved, and the experience remains predictable.

Explore TrustLayer Browse →
Straight answers

Frequently asked questions about DirectProtect.

Do I need to change MX records for email security?

No. TrustLayer Mail, built on the DirectProtect Mail architecture, keeps Microsoft 365 mail on its original path. That means no DNS or MX record changes, faster rollout, less risk and delivery that stays in your control. If needed, you can still deploy using alternative methods.

Does TrustLayer Mail protect outbound and internal mail too?

Yes. DirectProtect Mail applies policy consistently across inbound, outbound and internal messages, so protection and visibility cover every direction of mail flow.

What happens to suspicious emails?

You decide. Risky emails can be quarantined in TrustLayer or sent to the native Microsoft 365 Junk folder. You can also enable the Outlook add-in for user actions if you want them involved.

Will TrustLayer Mail slow down email delivery?

No. Because mail keeps its Microsoft 365 route, there are no proxy detours or MX reroutes. The result is predictable delivery and consistent performance.

How long does setup take?

TrustLayer Mail is deployed in minutes using a five-step wizard. Rollback is straightforward, so you can test changes safely without risk.

Does web and cloud security require a proxy?

Not with TrustLayer Browse. DirectProtect applies policy directly without routing traffic through a hosted proxy. That preserves source IPs, protects privacy and avoids the performance hits of proxy detours.

What threats does TrustLayer Browse protect against?

It blocks phishing sites, malware, ransomware and risky downloads, prevents access to inappropriate content, and manages shadow IT and unsanctioned cloud apps. It can also control data loss risks like file uploads and sharing. We do everything a proxy or VPN does, just without the user friction.

Does it protect users off the network?

Yes. Controls are enforced directly on the device, so policies follow users whether they are in the office or working remotely.

Will browsing performance be affected?

No. Without a proxy, requests keep their original route. That means consistent response times and a smoother user experience.

Can it control what users do inside cloud apps?

Yes. TrustLayer Browse not only gives visibility into app usage but also lets you allow or block apps and govern specific user actions inside them.

Report

Resilience starts with clarity.

From burnout to budget cuts, UK security leaders are rethinking cyber resilience. This report uncovers what's breaking on the UK cyber scene, and what's coming next.

Download the report

Out with the old.
In with the direct.

Most tools send traffic on a detour and add guesswork to performance. DirectProtect keeps the native route and enforces policy where work happens, so you get clear control without slowing people down.

Book a demo
Live platform, your questions.
Book a demo
Already with BT, an MSP or a reseller?
It can be switched on through them.
How →