Home / Cybersecurity / 365 Total Protection

Hornetsecurity GmbH (Hannover, Germany), part of Proofpoint (US) since December 2025

365 Total Protection

Security package for Microsoft 365 in four plans. Plan 4 includes the AI Cyber Assistant, which analyses reported emails, protects Teams and checks recipients before you send anything.

Shared spot2of 13 professional tools with a GDPR profileOur summary of what the provider itself publishes about your data: whether the data is held in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure in cybersecurity
GDPR: Good
  • Provider based in the EU
  • Publishes certification/GDPR safeguards

Each block is a professional tool in cybersecurity, with the strongest GDPR profile on the left. 7 professional tools, like 365 Total Protection, have a good profile: they share this spot. Click through for that tool.

Priceon request
Free trialYes
Based inUSEU
ModelNot disclosedAccording to the provider, the AI Cyber Assistant uses 'an LLM model'; which language model is not disclosed. Hornetsecurity is ISO 27001 certified and stores customer data in its own regional data centres; where AI processing takes place and whether customer data is used for training is not disclosed. German company (EU), parent company Proofpoint is outside the EU.

Last checked: 5 November 2026 · How we check

Is this your tool? Fill in missing details

What it does

Spam and malware filter for M365
Automatic email encryption
Advanced Threat Protection
Email archiving and continuity
Back-up and recovery for M365
Security awareness and permission management
AI Recipient Validation
Teams Protection and AI Email Security Analyst

Comparable in cybersecurity

All 13 professional tools for cybersecurity

365 Total Protection compared

Underlying model

According to the provider, the AI Cyber Assistant uses 'an LLM model'; which language model is not disclosed. Hornetsecurity is ISO 27001 certified and stores customer data in its own regional data centres; where AI processing takes place and whether customer data is used for training is not disclosed. German company (EU), parent company Proofpoint is outside the EU. Many tools build on a large model from, for example, OpenAI or Anthropic. If in doubt, ask for the data processing agreement: it states where your data goes.

GDPR check for cybersecurity

Questions about 365 Total Protection

Which AI model does 365 Total Protection use?
The maker of 365 Total Protection does not disclose which AI model sits underneath. The AI Cyber Assistant uses, according to the provider, 'an LLM model', but which language model is not public. Hornetsecurity is ISO 27001 certified and stores customer data in its own regional data centres; where AI processing takes place and whether customer data is used for training is not public. German company (EU), parent company Proofpoint is outside the EU.
How much does 365 Total Protection cost?
on request. Check the current price on the provider's website; rates change often.
Who is 365 Total Protection for?
365 Total Protection focuses on cybersecurity. It fits work such as detection and triage: assessing, grouping and summarising alerts from endpoints, network, cloud and email; investigation and response: looking into incidents, building search queries and proposing or carrying out countermeasures; attack surface and pen testing: mapping reachable systems and testing vulnerabilities with AI agents.
What should I watch out for with AI in cybersecurity?
A security tool sees everything: log files, emails, usernames and network traffic. That is personal data, so you need a data processing agreement and must know where the data is stored. Also ask whether the AI assistant is trained on your data. WithSecure (Finland) says it processes data for Luminen in AWS in Europe and does not train foundation models on customer data. Sekoia stores data in Germany or elsewhere in the EU/EEA and is ISO 27001 certified. SoSafe (France) can run self-hosted. With Microsoft Security Copilot you choose the geo of your workspace, but sharing data with Microsoft is on by default. For Charlotte AI, ESET LiveAI and Mindgard the hosting location is not public. Never let an agent act on production systems without analyst approval, and record who makes the 24-hour report under the Cybersecurity Act when an incident occurs.

Every Friday: what changed in AI for cybersecurity

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.