I'm looking for insights from other sysadmins regarding Office 365 as offered by GoDaddy. My client is stuck with GoDaddy for the next few years, so migrating elsewhere is off the table. I'm aware of GoDaddy's reputation for being less flexible, and I'm not here to rant about that. The issue at hand is the phishing volume in our setup. We have Office 365 through GoDaddy with Advanced Email Security enabled, yet each user receives about one phishing email weekly. Recently, a new employee got caught in a gift card scam, raising some eyebrows about GoDaddy's responsibility as our M365 provider.
In my previous roles in larger companies, our email filtering was much stricter, preventing such phishing attempts from ever hitting inboxes. But with GoDaddy, we seem to have a much more permissive filtering approach because these phishing emails, including some impersonating executives, still land in our inboxes.
I'm looking to understand:
- Is it common knowledge that GoDaddy-managed M365 tenants don't have the same level of control as direct Microsoft tenants?
- Are GoDaddy's default settings intentionally more lenient to minimize false positives, leading to more phishing threats?
- Has anyone noticed a clear difference in phishing frequencies between tenants managed by GoDaddy versus those managed directly by Microsoft?
5 Answers
We deal with GoDaddy too, and yes, we have their Advanced Email Security setup. I can't compare directly since I haven't worked with other setups, but it does seem like I hear more issues from people using GoDaddy. You might want to consider bypassing GoDaddy's filtering by using a third-party service or adjusting your settings if possible.
I've heard mixed reviews about GoDaddy and honestly, if it were up to me, I'd avoid them as much as possible. Transitioning filtering to a different provider might be a hassle, especially getting everyone on board, but it could really improve your security. Good luck!
Are you sure they're not bypassing GoDaddy's security by sending emails directly through 365? That could be a concern.
In our experience, we use a third-party email gateway alongside Exchange Online Protection for better filtering. If GoDaddy is managing your Office 365 side, you might not have full access to these tools. It sounds like their filtering isn’t cutting it, making it risky to stay locked into this contract. Have you looked into what breaking it would cost?
Just to add, GoDaddy’s Advanced Email Security is actually a white-labeled version of Proofpoint. There are configurations you can tweak to enhance your filtering. But getting decent support from GoDaddy can be a nightmare, so be ready for a wild ride there!

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures