Connection filter
Connections from sources with a poor reputation are refused as they connect. Spam-bot behaviour and excessive connection attempts are stopped before a message is accepted.
Security layers
Multi-layer email security, explained layer by layer
Every incoming message passes the same security layers in the same order. Each layer records its result, so your team can see exactly why a message was delivered, held or refused.
Monthly per domain · No long contracts · No automatic charges
01Sender
02SecuraWall · multi-layer protection
03Your mail server
The order of the checks.
Connection
- Connection filter
- SMTP admission
- Your exception rules
Filtering
- SPF, DKIM and DMARC
- Reputation lists
- First-time sender
- Antivirus
- Attachments and macros
- Links
- QR codes and images
- BEC and impersonation
- Spam score
Decision
- Deliver, quarantine or reject
Before delivery
- Click-time link protection
- Sender warning banner
Delivery
- Delivery to your server
- After delivery: clicks and reports
SMTP admission
Recipients that do not exist are refused during the SMTP conversation, so your server never carries that load. Command syntax hidden inside an email address is refused before it can reach your server.
Your exception rules
Trusted and blocked senders, link rules and protected names that your IT team sets. No rule can switch off the antivirus scan.
SPF, DKIM and DMARC
Every sender is checked against SPF, DKIM, DMARC and ARC. Weak or missing authentication is recorded, and DMARC reports show who sends mail in your name.
Reputation lists
Senders, networks and links are compared with known malicious and spam reputation lists.
First-time sender
A sender who has never written to your organisation before is recognised, so unusual requests from new addresses stand out.
Antivirus
Messages are scanned with several signature sets and matched against hashes of known malicious files.
Attachments and macros
Rule-based analysis finds HTML and SVG phishing pages, PDFs with active content and dangerous archives. Office macros are inspected without being run. Each domain can block file types.
Links
Before delivery, links are checked against known malicious link lists and reputation data, then rewritten into protected links.
QR codes and images
QR codes and text inside images are read, and the links they contain are checked like any other link.
BEC and impersonation
Executive name impersonation, payment and IBAN change requests, protected names, and fake brand or file-sharing messages are detected.
Spam score
Reputation, machine-learning-assisted scoring and your IT team's own decisions produce a spam score. Verified newsletters are told apart from other bulk mail.
Decision
Each message gets one clear outcome: deliver, quarantine or reject. The reason is recorded in the delivery history.
Click-time link protection
When a user clicks a protected link, the page is inspected again at that moment, because a link that was clean at delivery can turn malicious later.
Sender warning banner
A short banner warns users about risky or first-time senders, and lets them report a message as suspicious with one click.
Delivery to your server
Clean mail is delivered to your mail server. If your server cannot be reached, mail waits in the queue for up to 14 days and is retried every 3 minutes.
After delivery
Link clicks and user reports remain visible in the delivery history, so your IT team can follow up.
Look closer at each area.
- Spam and phishingBusiness spam and phishing protection: connection filter, reputation lists, sender authentication and machine-learning-assisted spam scoring.
- Malware and attachmentsEmail antivirus with several signature sets, malicious file hashes, attachment rules, Office macro inspection and blocked file types per domain.
- Links, QR codes and imagesLinks checked before delivery and again at the moment of the click. QR codes and text inside images are read and their links checked.
- BEC and impersonationDetect executive impersonation, payment and IBAN change requests, protected names and fake brands before your finance team acts.
- QuarantineA personal quarantine portal in 8 languages. Release rights by quarantine reason, a fresh scan on every release, directory users and quotas.
- Delivery historySee why each message was delivered, held or refused: delivery history with timelines, layer results, reports, DMARC reports and outage alerts.
- SPF, DKIM and DMARCEvery incoming message is checked against SPF, DKIM, DMARC and ARC. DMARC reports show who sends mail as your domain, by country.