Authentication and reputation
SPF, DKIM and DMARC results feed directly into the score and quarantine decision. RBL lookups with Spamhaus DQS support, plus empty-subject and invalid-sender checks, form the first line of defense.
Secure Mail
Threats stopped by AI before they reach the inbox
Every inbound and outbound message passes through one security gateway. The AI model scores it; phishing, fake payment requests, malicious attachments and data leaks are quarantined before they reach a user. You manage the decisions from the panel.
Threat protection
Authentication, reputation, AI and antivirus layers separate malicious mail before it reaches the inbox.
AI scoring
Body, headers and attachments are scored by a machine-learning model. You set quarantine and reject thresholds for your organisation; every flag you make in the panel makes the model more accurate for you.
Antivirus scanning
Attachments are scanned by every installed antivirus engine before any other decision. Infected mail is rejected and cannot be released.
Attachment and macro control
Dangerous attachment types are blocked. Office documents with macros are quarantined; legitimate macros can be released after review. Text inside attachments also counts toward the score.
High-confidence phishing and newsletter separation
High-confidence phishing is rejected or held in a quarantine that cannot be released. Newsletters and promotions are classified separately and either tagged and delivered or held.
Link Guard — click-time protection
- Links are rewritten to a safe approval address on delivery; trusted sites can be excluded.
- The link is scanned again at click time and does not open if risky.
- Redirect chains are followed and dangerous downloads are blocked.
- URL reputation via URLHaus and optional Google Safe Browsing.
Fraud and impersonation
Catches social engineering attacks that cause financial loss — before the payment is made.
Impersonation and lookalike domains
Senders imitating your domain with one-letter typos, dashes or similar characters are detected. Fake internal addresses or executive titles in the display name raise the risk; high scores are quarantined.
BEC and account takeover
Sender identity, payment language and unusual recipient behavior are evaluated together. Outbound rate limits curb bulk sending from a compromised account.
Supplier account change
If the payment account in a message from a known supplier changes, the message is held. The new account is accepted only after review.
External mail warning
A visible warning strip is added on top of messages from outside the organization, so users see it is external before they click. The wording is customizable in the panel.
Suspicious message reporting
Users report a suspicious message from the panel; it enters a review queue and is not reopened until the case is closed.
Data protection
Keeps sensitive data from leaving the organization and keeps outbound traffic under control.
DLP — sensitive data protection
Built-in detectors for Turkish IBANs, national ID numbers, payment cards and password patterns, plus keyword and regex custom rules. Strict outbound leak control; reports keep only masked incidents with CSV export.
Outbound recipient checks
First-time external recipients and a sudden rise in new recipients are flagged in outbound mail, so messages can be reviewed before delivery.
Archive and compliance
Stores all correspondence encrypted and offers search and export for audits and legal proceedings.
Encrypted archive
Inbound, outbound and internal correspondence is stored per domain and mailbox. Copies are encrypted at rest; retention is set by plan.
eDiscovery
Full-text search across message bodies and attachments, legal hold and export. Available on Business and Enterprise plans.
Cloud archive backup
The organization connects its own Google Drive or OneDrive and archive copies are exported there. Manual, incremental and scheduled backups are supported. The server archive is never deleted.
Management and integration
An isolated panel per organization, organization-specific policies and integration with hosting infrastructure.
Multi-tenant, isolated panel
Each organization sees only the mail, quarantine, archive and reports for its own domains, and adds domains itself within the plan limit.
Organization-specific policy
Quarantine and reject thresholds, content filters, notification templates and warning texts are organization-specific. Global security layers stay in the administrator policy.
Plesk extension
After installation, the domain card offers a connection setting and panel sign-in. Customers never see server settings; the license and connection stay with the hosting administrator.
How Secure Mail works
Your mail server stays put, protection moves in front
Point your MX record to Secure Mail; clean mail reaches your own server and suspicious messages wait in quarantine.
Inbound mail
Every message from the internet is inspected at the gateway first. Clean mail goes to your server; suspicious mail is quarantined.
- Internet
- Secure Mail
- Your mail server
Outbound mail
Mail leaving your organization is checked for sensitive data and unusual recipients, then delivered to the recipient.
- Your mail server
- Secure Mail
- Recipient
Setup
Deployment steps
Setup is usually completed without interrupting your current system. Our team is with you at every step.
-
01
Point your MX record
Point your domain’s MX record to Secure Mail. We recommend lowering the record’s TTL before cutover. We finalize SPF and other identity records together during setup.
-
02
Create an account and add your domains
Free signup starts you on the Free plan. Add domains under Domains up to your plan limit. Mail is not accepted for domains that are not on the list.
-
03
Set your policy
In My policy, adjust quarantine thresholds, content filters and notifications for your organization. Infrastructure settings stay with the administrator.
-
04
Protect outbound mail too
Have your mail server send outbound mail through Secure Mail. Sensitive data and unusual recipients become visible on that path.
-
05
Monitor, back up, act
Track quarantine, archive and reports in the panel; see quota usage under My account. On Starter and above, back up the archive to Google Drive or OneDrive.
-
06
If you use Plesk
Install the extension and paste the connection code from the panel into the domain’s SG Settings. The customer signs in to the panel with that domain’s quarantine and policy.
Start for free
Create an account, add your domain and point inbound mail to Secure Mail. Upgrade any time for advanced protection and cloud archive.
Get started freeWe are with you during setup
We plan the MX cutover, outbound path and identity records with you, and draw up a roadmap for your Exchange, MailEnable or Plesk environment.
Request a demoPrice calculator
Choose your Secure Mail plan
Pick the plan and billing period; the total updates instantly. Sign in and place the order from your account.
Secure Mail is watched by Oxisec EYE too: scoring models, quarantine decisions and queue health are under control 24/7.
Meet Oxisec EYELet us pick the right starting point together
Email security, GPU servers, business email or hosting: describe what you need in a few sentences and we will send a configuration and migration plan the same day.