- Home
- Email Encryption Software
- Secure Message
Secure Message
What it is
Secure Message is a self-hosted inbound email gateway that filters mail before it reaches an existing mail server. Community features include Postfix filtering, spam scoring, DNSBL, SPF, DKIM and DMARC checks, quarantine, mail logs, and administrator MFA. Professional adds a recipient portal where protected messages open with a one-time code, without an account or app. Rules can encrypt, redirect, block, or hold sensitive outbound mail, and recipient checks can use SMTP callout, LDAP, or directory lookups. Stored messages, attachments, and quarantine use Fernet encryption with AES-128-CBC and HMAC-SHA256; the key remains on the customer host. TOTP MFA, role-based access, and audit logs are supported, with CSV export. Enterprise adds AI Autopilot tuning, eDiscovery and archive search, DLP, and disclaimers, while Autopilot and the classifier start disabled. The gateway can sit before Microsoft 365 or another mail server without mailbox migration. It runs as a single-node Debian 13 appliance; 2 vCPU and 4 GB RAM are recommended to start. Professional costs $690 a year.
For and against
For
- Self-hosted gateway deployment
- One-time-code recipient portal
- Multiple outbound protection rules
- Customer-held encryption key
- CSV-exportable audit logs
Against
- Professional costs $690 a year
- Runs on Debian 13
The verdict
Secure Message combines inbound filtering, protected message delivery, encryption, and administrative controls in a self-hosted appliance. Its paid tiers add portal delivery, outbound rules, support, and compliance features, with Professional priced at $690 a year.
Who it suits
Secure Message fits healthcare, finance, legal, MSP, internal IT, and compliance-focused organizations needing self-hosted mail filtering and controlled delivery. It also suits teams placing protection in front of Microsoft 365 or an existing server.
Plans and prices
Professional
10 domains · up to 10 users · business-hours support
Read 8 Oct 2026 · secure-message.io
Enterprise
Unlimited users and domains · priority support and SLA
Read 8 Oct 2026 · secure-message.io
Community
1 domain · up to 1 user · one administrator · Community support
Read 8 Oct 2026 · secure-message.io
On the record
- Access and audit
- The product supports TOTP administrator MFA, role-based access and audit logging, with logs exportable to CSV.secure-message.io · read 8 Oct 2026
- Admin access controls
- Yessecure-message.io · read 20 Sep 2026
- Community features
- Community includes Postfix content filtering, spam scoring, DNSBL, SPF, DKIM and DMARC checks, quarantine, mail log and administrator MFA.secure-message.io · read 8 Oct 2026
- Company
- Secure Message is identified as a Rubix Technology LLC product.secure-message.io · read 8 Oct 2026
- Deployment requirements
- The single-node appliance runs on Debian 13 and the maker recommends starting with 2 vCPU and 4 GB RAM.secure-message.io · read 8 Oct 2026
- Encryption
- Stored messages, attachments and quarantine are encrypted with Fernet using AES-128-CBC and HMAC-SHA256, with the key held on the customer host.secure-message.io · read 8 Oct 2026
- Enterprise features
- Enterprise adds AI Autopilot tuning, eDiscovery and archive search, DLP and disclaimers; Autopilot and the classifier are off by default.secure-message.io · read 8 Oct 2026
- Integrations
- The gateway can sit in front of Microsoft 365 or an existing mail server, using MX routing and outbound smart-host relay without mailbox migration.secure-message.io · read 8 Oct 2026
- Intended users
- The maker describes the product for healthcare, finance and legal teams, MSPs, internal IT teams and compliance-driven organizations.secure-message.io · read 8 Oct 2026
- Message expiry
- Yessecure-message.io · read 20 Sep 2026
- Outbound protection
- Professional rules can encrypt, redirect or block sensitive outbound messages, including holding them for the recipient portal.secure-message.io · read 8 Oct 2026
- Product
- Secure Message is a self-hosted inbound email gateway that filters mail before it reaches an existing mail server.secure-message.io · read 8 Oct 2026
- Recipient verification
- Professional can reject mail to nonexistent users using SMTP callout, LDAP or directory lookups.secure-message.io · read 8 Oct 2026
- Secure delivery
- linksecure-message.io · read 20 Sep 2026
- Secure recipient portal
- Professional recipients open protected messages in a web portal using a one-time code, without creating an account or installing an app.secure-message.io · read 8 Oct 2026
- Support
- Community includes community support, Professional includes business-hours support, and Enterprise includes priority support and an SLA.secure-message.io · read 8 Oct 2026
- Trial
- The maker says users can request a scoped trial with engineering but does not state a trial duration.secure-message.io · read 8 Oct 2026
