Stop spam, viruses and phishing before they reach your inboxes

Accepts mail on port 25 (STARTTLS), 465 (implicit TLS) and 587 (submission).

Every message is fully inspected before it is accepted and forwarded – never delivered unchecked.

Mail to non-existent mailboxes is rejected at the SMTP level.

Unknown senders are briefly delayed first – an effective filter against spam bots.

One target server per domain with several prioritised fallback targets.

Undeliverable mail stays in the queue and is retried automatically – no loss.

If an inspection module is down, mail is held back instead of delivered unchecked (configurable).

Proven spam detection through rule- and learning-based content analysis.

Real-time check of the sender IP against recognised reputation blocklists.

Built-in scoring of suspicious headers: missing headers, reply-to mismatch, shouting subject.

In-house reputation and fingerprint database – spots spam waves across domains.

Every mail gets a score; above your threshold the chosen action kicks in.

Spam is quarantined, tagged or passed through – configurable per tenant.

Every message including all attachments is scanned for malware before delivery.

Optional lookup of URLs found in the mail against VirusTotal.

Mail detected as a virus is discarded and deliberately cannot be released.

Suspicious mail is held safely; release or reject with one click.

Recipients without an account manage their quarantine via a passwordless, secure link.

Plain-text preview of every mail – no HTML, no tracking pixels, no script.

Instantly or as a digest (daily/weekly) at the chosen hour in the tenant's time zone.

Straight from quarantine the recipient can create an account via verified email.

Freely combinable rules by sender, recipient, content, time window and action.

Sender/recipient/domain/regex/IP range, spam score, subject/header/body patterns, attachment extension, virus.

Accept (whitelist), block, quarantine or tag as spam.

Rules apply platform-wide or to a single tenant only.

Always deliver or block senders – by list (exact address) or by rule (domain/pattern).

Any number of organisations strictly separated on one installation.

Fine-grained permissions with roles, individual overrides and owner protection.

Admin management plus self-service for profile, domains, mailboxes and lists.

TOTP apps plus ten one-time backup codes; secrets stored encrypted.

Inspection modules can be switched on and off at runtime – no restart.

Full web interface in German and English.

Filterable log of every processed message – by recipient, action and tenant.

Volume, spam rate and deliveries at a glance – plus dedicated views for the queue and system status.

For each message, the contribution of every inspection module to the total score.

Users report missed spam; evaluation by day and top domains.

Let's Encrypt / ACME certificates incl. automatic renewal (HTTP-01 & DNS-01).

One entry point for API and web with host routing and SNI certificate selection.

Sensitive data AES-256-GCM encrypted; keys derived per purpose via HKDF.

One codebase – as a hosted service or your own installation with an annual licence.

Single-node binding, 3-day lease, machine-ID hash and a controlled server-transfer limit.

Plan-coupled support tickets with quota, SLA and add-on credits.

Built-in forum for all signed-in users, organised by edition.

Admin-editable help articles (Markdown, de/en) with search and anchors.

All transactional mail multilingual, previewable and editable in the admin.

If the customer's destination server is down, mail is accepted and held instead of rejected – no bounce, no loss.

Once the server is reachable again, the buffered mail flows out automatically.

Add us as your secondary mail server – it only kicks in when your own server does not respond.

Guaranteed hold of 1 to 30 days depending on the plan – included in the SaaS subscription or bookable separately.