Phishing defence services

https://www.ncsc.gov.uk/guidance/phishing tells about protecting against phishing.

Since phishing reaches you (or your employees) via e-mail you can't do much - apart from being careful when clicking on links in mails - except running anti-spam in your mail-server. But that's kind of impossible if you have, for example, a gmail.com or live.com address, since you don't own those servers.

Our office is primarily composed of seasoned programmers. Also a group of techs that deal with those that click on every link.

I googled you and your question and it seems to be a leading question or shill question. That is you may already have a product in mine or know what the answer is.

Firstly, understand and look at the ways phishing can come into your organization.

Train your staff in what to look for that is absolute key. Then, when looking for a defence service, find one that will prevent the phishing emails from getting in to your or your colleagues' inbox by getting email filtering. Get spam blocked and an anti virus protection at the same time.

The downside to this service is finding one that suits your needs. There are many organizations that say that they do these things, but actually I would research as much as you can on who offers what.