Year-End Offer: 30% Off Managed Email Security for Nonprofits

If you run a registered 501(c)(3), our year-end offer is bigger for you. Through December 31, 2026, new nonprofit customers who sign a 12-month agreement for fully managed email security get an extra 10% on top of the year-end discount: 30% off the first 12 months instead of the standard 20%. The nonprofit rate replaces the standard rate rather than stacking with it. That takes Managed Email Security from $8 per user per month to $5.60. It is the license plus a fully managed service, not a license on its own, and it comes with no onboarding fee, a complimentary security review of your Microsoft 365 or Google Workspace tenant, and a monthly summary of what was blocked and what we changed.

We are putting this in front of nonprofits now for two reasons. The first is the calendar: GivingTuesday is December 1, and the weeks around it are when your inbox carries the most money and the most strangers. The second is a change many organizations have not noticed yet, which we get to below.

What you get

We run Managed Email Security for small and medium organizations on Check Point Email Security, the product formerly called Harmony Email & Collaboration. It connects to Microsoft 365 or Google Workspace through the cloud API, so there is no appliance, no change to your MX records, and no maintenance window. Per Check Point, in inline mode it acts as a defense layer after the Microsoft 365 or Google Workspace mail gateway and before inbox delivery, covering phishing, business email compromise, and malicious attachments and links across the mailboxes you choose to protect. We wrote about how the same platform handles a new attack type in yesterday's year-end offer post, which walks through calendar-invite phishing.

The license is the smaller part. The rest is that we do the work a dedicated email security admin would do, without you hiring one. Day to day, that means we run the quarantine, manage the block and allow lists, handle email restore requests, investigate anything suspicious a staff member reports, and keep spam and bulk mail routed to Junk so the inbox stays usable. When Check Point ships a new protection, we read it, test it, enable it in your tenant, and grant the permissions it needs. When a new phishing pattern shows up in one client's inbox, we apply the policy change across the tenants we manage where it fits.

Each new customer also gets a complimentary one-time review of the tenant itself: security settings, conditional access or context-aware access rules, allow lists, and external sharing and forwarding, set to the minimum the organization needs. For a nonprofit that inherited its Microsoft 365 or Google setup from a predecessor, this is often where the surprises are.

Setup is one working session with whoever holds admin rights, which authorizes the API and starts the scanning. A second session a couple of weeks later walks you through what got flagged. Pricing is per user, so the model is the same whether you have a staff of 10 or 500.

Why now: the grant changed, and the season is coming

In May 2025, Microsoft announced that the free Microsoft 365 Business Premium grant for nonprofits would be discontinued "upon their next renewal date on or after July 1, 2025," replaced by "up to 300 granted licenses of Microsoft 365 Business Basic" and "discounts up to 75 percent on many Microsoft 365 nonprofit offers." Renewal dates vary, so many organizations that were on the old grant have already passed that date, and the rest will.

The part that matters for email: Microsoft's own service description lists Defender for Office 365 Plan 1, the layer that adds Safe Links, Safe Attachments, anti-phishing, and real-time detections, as included in Business Premium. Business Basic is not on that list; its mailboxes get the built-in Exchange Online Protection that Microsoft describes as included with every Exchange Online cloud mailbox. An organization that accepted the free Basic seats and did not buy Premium at the discounted rate or add a Defender for Office 365 license on top is now running on that baseline alone, and the change is easy to miss, because nothing in the mailbox looks different. Google Workspace for Nonprofits is still free, and its built-in filtering is a baseline in the same way. Both are baselines by design. Neither is tuned to your organization's mail, and neither comes with someone reviewing what it caught.

Now the season. The FBI's Internet Crime Complaint Center counted 24,768 business email compromise complaints in 2025 with reported losses of $3.05 billion, and phishing and spoofing was the single largest complaint category at 191,561 reports. Charity fraud on its own drew 662 complaints and $7.9 million in reported losses, and those are only the cases someone reported. On August 27, 2026, the FTC published a fresh consumer alert warning that "scammers might create fake charities that seem official" and "might impersonate well-known charity organizations." When donors are being warned that charities can be impersonated, an email that comes from your real domain, with your real signature, is exactly what an attacker wants to control.

Abnormal AI's 2026 Attack Landscape Report, built on nearly 800,000 email attacks across more than 4,600 organizations in the second half of 2025, found that vendor email compromise now represents 61% of all business email compromise. It also found that when the pretext is a billing account update, 26.5% of those attacks came from a vendor's real, hacked account rather than a lookalike address, against under 1% of invoice-themed attacks. For a nonprofit, "account update" is the grant disbursement, the caterer for the gala, the bank details on a matching gift.

Community IT Innovators, an MSP that supports about 200 nonprofits and 8,000 staff, reported 32 confirmed compromised accounts and three wire fraud incidents across its clients in 2024, and noted that 2023 was "the first year that we saw these attacker-in-the-middle attacks" that "really circumvented multi-factor authentication." Microsoft's 2025 Digital Defense Report says plainly that "state-affiliated actors are increasingly attacking non-governmental organizations (NGOs)" to expand their insights, and that more than 97% of identity attacks are password attacks.

None of that requires a big target. It requires a mailbox with a finance role, a busy December, and a filter nobody is tuning.

The offer, in full

Managed Email Security is $8 per user per month, with the management included rather than billed on top. Through December 31, 2026, new customers who sign a 12-month agreement get 20% off the first 12 months, which is $6.40 per user per month. Registered 501(c)(3) nonprofits get an extra 10% on top of that: 30% off instead of 20%, which is $5.60 per user per month. The nonprofit rate replaces the standard rate, so it is one discount of 30%, not two stacked. The discount is for new customers only, applies to the first 12 months of the agreement, and after that the rate is the then-current list price. Nonprofit status is confirmed with your IRS determination letter. The agreement has to be signed by December 31, 2026. There is no onboarding fee, and the complimentary tenant review is included.

If you would rather see what is getting through first, we also run a free two-week email security assessment. It sits alongside whatever you use today, reads mail through the same API, and reports what it flagged, if anything, that your current filter let through. There is nothing to install beyond the same admin approval, and you keep the report either way. We described the broader nonprofit picture, including donor data and AI tools, in our earlier post for nonprofits.

We work with nonprofits and small and medium organizations nationwide, including Washington DC, Northern Virginia, and Maryland. To claim the nonprofit offer or start the assessment before giving season, book a free 15-minute call and we will take it from there.

Sources: Microsoft, Nonprofit Partners announcement on the Business Premium and Office 365 E1 grant discontinuation (posted May 19, 2025; Microsoft communication dated May 14, 2025); Microsoft Learn, Microsoft Defender service description (Defender for Office 365 Plan 1 licensing) and Exchange Online Protection service description; FBI IC3, 2025 Internet Crime Report (2026); FTC consumer alert, "When donating, support those in need, not a scammer" (Aug 27, 2026); Abnormal AI, 2026 Attack Landscape Report (Apr 22, 2026); Community IT Innovators, 2025 Nonprofit Cybersecurity Incident Report (Mar 2025); Microsoft Digital Defense Report 2025 (Oct 2025); Google for Nonprofits help center; Check Point product materials for vendor claims.