Identity Protection by Material Security detects and contains account takeover scenarios with real-time alerts. It limits lateral account takeovers by adding a simple authentication step to access password resets and other identity verification messages. Identity Protection blocks delivery of identity verification emails like password resets or signup approvals and sends users a challenge message instead. Users confirm messages by verifying their identity via an existing identity provider or custom workflow. After verification, Identity Protection delivers blocked messages to the user's mailbox. It is built with security-conscious IT and Security teams in mind, providing a robust set of in-product security controls and an architecture that sidesteps traditional sources of vendor risk.