Abstract: Systems, apparatus, and computer program products provide for electronic mail (email) attachment hold and dispatch for security monitoring of email attachments. Specifically, embodiments of the invention provide for removing email attachments from emails containing such, holding the removed attachments in storage prior to delivering the email to the recipient and communicating the email to the intended recipient absent the attachment, but rather with a link or other means by which the email recipient can retrieve the attachment from the storage. Such a procedure not only allows for the attachment to be analyzed for threats prior to transferring the attachment to the email recipient, but also provides for a means by which information pertaining to the retrieval of the attachment is logged (e.g., who retrieved the attachment, from which computing device was the attachment retrieved, at what date and time was the attachment retrieved and the like).