It’s hard to overestimate how fundamental email has become as a route to attack enterprises. While there are numerous ways for attackers to target organisations, email is almost-always the common denominator. This presents a simple question: is the cloud email security deployed by the leading platforms, including Microsoft’s Office 365 and Google’s G Suite, capable of defending against the real-world threats faced by organisations and should organisations budget for advanced phishing protection?