: Traditional antivirus relies on known "signatures" of past attacks. Clearswift uses signature-less technology to monitor behavioral patterns, allowing it to detect and block zero-day threats and sophisticated variants before they are even catalogued by standard security databases.

Use this when a user reports a phishing email that was missed by the filters.

This is the "Prevention" layer.