Link rewriting is the replacement of original URLs in email messages with controlled redirect links so security systems can inspect or enforce policy when users click. It matters because malicious destinations often become dangerous only at click time, after the message has already been delivered.
What is Link Rewriting?
Rewritten links let defenders check reputation, block risky destinations, or log click behavior before allowing the user to proceed. This supports time-of-click analysis and can improve response to evolving phishing infrastructure.
What Link Rewriting Commonly Supports
Common uses include phishing defense, time-of-click protection, click telemetry, SEG workflows, and malicious-link blocking.
Link Rewriting vs. Raw Unchecked Link Delivery
Link rewriting creates an inspection and enforcement step at click time. Raw links send users directly to the destination without that control point.
Frequently Asked Questions
Why rewrite links?
Because a destination that looked safe at delivery time may become malicious later, or may require click-time blocking.
Does rewriting annoy users?
Sometimes, which is why usability and transparent policy communication matter.
