One question, one report.

16 examples of what Grok, ChatGPT or Claude can produce from your own LastSpam data.

Never reads your emails. Every report here is based on sender, recipient, subject and what LastSpam did with the message.

For IT teams, consultants and resellers. Ten-second answers, and reports you can hand to a client under your own name.

Sample data. Names, domains and numbers on this page are invented.

Security exposureFor the person in charge of IT

Outside accounts on work addressesAlso as a 4-page PDF

You ask“In the last 90 days, which outside platforms did our people sign up for with their work address?”

You get

Canva212

Dropbox164

OpenAI139

PayPal121

Pinterest97

LinkedIn88

Facebook54

Netflix23

Tools that can hold your files or data

Number of your addresses receiving account mail from each platform. Each account is a password that may be reused, and a place where your files may sit outside your control.

The phishing that got through

You ask“Did any suspicious password or payment email reach many of our mailboxes this month?”

You get

Sender	Subject	Mailboxes	Outcome
[email protected]	“Password protection update”	412	Delivered
[email protected]	“Your payment was declined”	96	Delivered, tagged spam
[email protected]	“Action required: benefits”	37	Quarantined

A look-alike sender that reached hundreds of mailboxes, with the list of who received it: who to warn, whose password to reset.

Who is sending as us

You ask“Which domains email us the most? Is anyone outside using our own domain as the sender?”

You get

boreal.example48,210

gmail.com11,940

acme-supply.example6,120

outlook.com4,480

atelier-lumen.example2,950

northwind-logistics.example2,210

Refused or told to retry: outside servers faking your address

Your own domain at the top of the list is not internal mail. It is outside servers sending as you. DMARC is how you tell the world’s mail servers to reject those.

Who is being targeted

You ask“How much dangerous email did these mailboxes get this quarter: our general manager (m.cote@), payroll@, payables@ and helpdesk@?”

You get

Mailbox	Dangerous, stopped	Most common subject
General manager	214	“Invoice to approve”
Accounts payable	187	“Our bank details changed”
Payroll	96	“Direct deposit update”
IT help desk	74	“Microsoft sign-in alert”

You name the mailboxes, it counts what was aimed at each. Where to put training and a second check first.

Daily IT workTen-second answers instead of menus

What the filter stopped, by reason

You ask“What did LastSpam stop for us this month? Split it by reason.”

You get

Told to retry later41,200

Refused at the door12,640

Link on a blocklist9,310

Rejected after analysis5,120

Sending server on a blocklist4,480

Failed SPF, DKIM or DMARC2,960

Your own block rules1,870

Quarantined412

One message can be caught by several defenses, so the rows overlap. The number to show your management.

Quarantine triage

You ask“What is in quarantine right now that may be legitimate?”

You get

Subject	Sender	Count	Worth releasing?
“You’ve got a new order”	Your own web shop	14	Likely yes
“Weekly tips”	A newsletter	11	Low value: fails SPF, DKIM, DMARC
“RE: Meeting Tuesday”	A partner’s mailing list	4	Likely yes
“Your quote”	A new supplier	2	Ask the recipient

Hundreds of quarantined messages sorted into “release”, “leave” and “ask”, in one answer.

Did it arrive?

You ask“Did the invoice from Acme Supply reach accounting yesterday?”

You get

2:14 PMReceived from [email protected]
ChecksSPF pass · DKIM pass · DMARC pass
VerdictClean
2:14 PMDelivered to [email protected]; your mail server accepted it

The answer you used to dig out of the mail log, for the person who asks “I never got it”.

Who did what

You ask“Who changed our rules or released messages this week? Any failed sign-ins?”

You get

When	Who	What
Mon 9:12 AM	m.gagnon	Released 3 messages for payroll
Tue 2:40 PM	it-admin	Whitelisted acme-supply.example
Wed 7:55 AM	Unknown	6 failed sign-ins on it-admin
Thu 4:05 PM	s.roy	Blocked one sender

The audit trail of your LastSpam panel, in plain words. Useful after an incident, or before an audit.

Management and financeReports a manager reads

Monthly security briefFor IT consultants

You ask“Write this month’s email security brief for our management. One page, plain words.”

You get

Email security briefboreal.example · October

96,400messages received

71%stopped before the inbox

3campaigns aimed at finance

78 / 100risk score

Based on sender, recipient and subject only.

A report a manager reads in two minutes. An IT consultant can deliver it to each client every month.

Invoices and renewals in personal mailboxes

You ask“Which invoices, receipts and renewal notices go to one person’s mailbox instead of accounting?”

You get

From	Kind	Goes to	90 days
A design tool	Receipts	9 mailboxes	27
A video-meeting service	Receipts	3 mailboxes	14
A software publisher	Renewal notices	1 mailbox	6
A domain registrar	“Your domain expires soon”	A former employee	2

Subscriptions nobody tracks, and the renewal notice that will be missed because it goes to someone who left.

A key client has gone quiet

You ask“Which of our biggest clients write to us much less than three months ago?”

You get

northwind-logistics.example−62%

atelier-lumen.example−48%

groupe-cascade.example+5%

pinecrest-dental.example+12%

Incoming mail only, per week. A drop is a reason to pick up the phone, not proof that the client is leaving.

One supplier, several departments

You ask“Which outside companies write to many different people here?”

You get

Company	People they write to	Messages, 90 days
acme-supply.example	9	1,240
northwind-logistics.example	6	810
atelier-lumen.example	5	430
pinecrest-dental.example	3	120

Several people dealing separately with the same supplier or prospect: negotiate once, and know who holds the relationship.

People and acceptable useHow work addresses are really used

Your organization decides who may ask these questions, and tells its staff that its email system can be audited.

Personal use of work addresses

You ask“How much shopping, banking and streaming mail arrives on our work addresses?”

You get

Online shopping1,180

Rides and food delivery420

Payment services310

Streaming140

Personal banking55

Messages in 90 days from well-known senders (an approximate count), whole organization, no names. Accounts holding payment details should not hang on a work mailbox: the basis for an acceptable-use reminder.

Long personal threads

You ask“Which mailboxes get the most replies from a single personal address (Gmail, Outlook.com, Yahoo)?”

You get

Mailbox	From	Replies, 30 days	Per working day
Mailbox A (sales)	One Gmail address	1,040	47
Mailbox B (reception)	One Outlook.com address	610	28
Mailbox C (warehouse)	One Yahoo address	220	10

Only incoming replies are counted, and a reply means a conversation. It may be a client who uses Gmail: check before concluding.

Mailboxes of people who left

You ask“Paul and Nadia left in September. What still arrives at their addresses?”

You get

Address	Still arriving	From
paul.t@	38 client messages	6 clients
paul.t@	4 password resets	2 platforms
nadia.b@	12 supplier invoices	3 suppliers

Clients still writing to someone who is gone, and accounts that can still be reset through a mailbox nobody reads.

Account alerts worth a look

You ask“Any data-export, address-change or unusual password-reset notices on our mailboxes this month?”

You get

Mailbox	Notice	Count
scanner-3@	Password reset requests	143
Mailbox D (sales)	“Your data export is ready”	3
Mailbox E (finance)	“Email address change requested”	1

A shared account hammered with password resets, a client list being exported, an account being moved to another address: early signs, from the subject line alone.

IT consultants and resellers: each of these is a deliverable you can hand to a client, under your own name.

Good to know: these reports are built from incoming mail, the mail sent to your organization. LastSpam does not see what your people send out.

Already a customer? Turn it on →Show me a demo

← How the AI assistant works (70-second video)