Same team, different surfaces. StrongestLayer Inc. ships an email security product at strongestlayer.com. This site is where our threat research team publishes the taxonomies and tools the product is built around. No waitlists, no sales follow-up, no marketing pixels here. The work is the point.
Each tool runs real LLM-driven analysis against the methodology in our research. Results land in 30 to 60 seconds. Free to use, with rate limits per target domain to keep costs sane.
This diagnostic combines two of our taxonomies. We map the 24 public data types attackers harvest before they write an email against the 44 email attack subtypes mapped to your platform's actual detection technologies. The output identifies the BEC and phishing variants you are currently missing on both fronts: data exposed AND stack blind.
Run Corporate Email Posture Check →The companion tool to the Posture Check. Six questions produce a customized Word document policy for your organization, applying regulatory floors (SEC, HIPAA, ITAR), industry-specific defaults, and your stated risk tolerance across six PDA categories and 24 data types. Sections marked [REVIEW] use framework defaults that should be confirmed with stakeholders.
Generate PASRP →The tools above are structured applications of the three taxonomies below. Read these to understand methodology, or come back as you encounter specific subcategories in your Posture Check report. The Corporate PDA Taxonomy maps the 24 public data types attackers harvest before sending. The Email Evasion Taxonomy maps the 36 techniques attackers use to bypass detection. The Email Attack Taxonomy maps the 44 attack subtypes that result, with walkable kill-chain simulations and a detection-tech matrix. Data, bypass, attack.
The canonical taxonomy of modern email attacks. 6 categories, 44 subtypes, 44 interactive kill-chain simulations, plus a 5-technology detection matrix and a 6-vendor architecture comparison.
Open Email Attack Taxonomy →The Corporate Public Data Attack-Surface taxonomy. 6 information categories, 24 data types, 5 max-risk combinations, 3-dimension scoring. Maps each data type to the attack it enables. The exposure framework consumed by the Corporate Email Posture Check tool.
Open Corporate PDA Taxonomy →Attacks have a goal, evasion has a method. 5 categories, 36 techniques, 3 architectural defeat tiers. Twenty-two are dataset-validated against our Dec 2025 to Feb 2026 corpus, fourteen are literature-validated. Each technique carries a MITRE ATT&CK mapping plus the vendor aliases SOC analysts actually use.
Open Email Evasion Taxonomy →Built and maintained by StrongestLayer Threat Research. Free for personal and professional use. Tools call our LLM analysis pipeline, which runs in our infrastructure and discards uploaded content after the response. We do not store or train on your data.