Skip to content
An open dune horizon at dawn. Wide field, breath of distance.
Email Security 101

Email security 101.

The basics that hold across nearly every attack class. Three layers, ten field notes, one starting point.

Most email security problems sit in one of three layers. Authentication on the sender side proves a domain is allowed to send. Content filtering at the receiving provider catches the obvious cases (mass blacklist domains, classic phishing kits, malware payloads). And a known-or-pay gate at the inbox door handles the senders the content filter cannot reliably classify: cold outreach, AI-generated pitches, polished first emails from unknown domains.

The first two layers are well documented. SPF, DKIM, and DMARC are standardized and supported in every major mail provider. Gmail and Outlook ship effective bulk-spam filtering by default. The third layer is newer and is the layer Rythm sits in. The field notes below cover both halves: how the existing layers work, where they break, and what fills the gap.

Read in order if email security is new to you. Skim by topic if you are evaluating a specific control. The reading list is curated to leave a knowledge worker with a working mental model of how an inbox is defended in 2026.

One plan. One price.

Keep your existing Gmail or Outlook. Cancel anytime.

$1.65
per month
Start protecting

Annual on Lightning includes one bonus month. See full pricing.