Secure Message
secure-message.io
What it is
Secure Message is a self-hosted inbound email gateway that filters mail before it reaches an existing mail server. Its Community features include Postfix content filtering, spam scoring, DNSBL, SPF, DKIM and DMARC checks, quarantine, mail logs and administrator MFA. Professional adds a recipient web portal: recipients open protected messages with a one-time code, without an account or app. Its rules can encrypt, redirect or block sensitive outbound messages, and recipient checks can use SMTP callout, LDAP or directory lookups. Stored messages, attachments and quarantine use Fernet encryption with AES-128-CBC and HMAC-SHA256; the key remains on the customer host. Access controls include TOTP administrator MFA, role-based access and audit logging, with logs exportable to CSV. Enterprise adds AI Autopilot tuning, eDiscovery and archive search, DLP and disclaimers; Autopilot and the classifier are off by default. The gateway can sit in front of Microsoft 365 or an existing mail server without mailbox migration. The single-node appliance runs on Debian 13, with 2 vCPU and 4 GB RAM recommended as a starting point.
Spec sheet
- Product
- Secure Message is a self-hosted inbound email gateway that filters mail before it reaches an existing mail server.Read 8 Oct 2026 · secure-message.io
- Intended users
- The maker describes the product for healthcare, finance and legal teams, MSPs, internal IT teams and compliance-driven organizations.Read 8 Oct 2026 · secure-message.io
- Free plan
- YesRead 20 Sep 2026 · secure-message.io
- Trial
- The maker says users can request a scoped trial with engineering but does not state a trial duration.Read 8 Oct 2026 · secure-message.io
- Integrations
- The gateway can sit in front of Microsoft 365 or an existing mail server, using MX routing and outbound smart-host relay without mailbox migration.Read 8 Oct 2026 · secure-message.io
- Support
- Community includes community support, Professional includes business-hours support, and Enterprise includes priority support and an SLA.Read 8 Oct 2026 · secure-message.io
- Company
- Secure Message is identified as a Rubix Technology LLC product.Read 8 Oct 2026 · secure-message.io
- Access and audit
- The product supports TOTP administrator MFA, role-based access and audit logging, with logs exportable to CSV.Read 8 Oct 2026 · secure-message.io
- Admin access controls
- YesRead 20 Sep 2026 · secure-message.io
- Community features
- Community includes Postfix content filtering, spam scoring, DNSBL, SPF, DKIM and DMARC checks, quarantine, mail log and administrator MFA.Read 8 Oct 2026 · secure-message.io
- Deployment requirements
- The single-node appliance runs on Debian 13 and the maker recommends starting with 2 vCPU and 4 GB RAM.Read 8 Oct 2026 · secure-message.io
- Encryption
- Stored messages, attachments and quarantine are encrypted with Fernet using AES-128-CBC and HMAC-SHA256, with the key held on the customer host.Read 8 Oct 2026 · secure-message.io
- Enterprise features
- Enterprise adds AI Autopilot tuning, eDiscovery and archive search, DLP and disclaimers; Autopilot and the classifier are off by default.Read 8 Oct 2026 · secure-message.io
- Message expiry
- YesRead 20 Sep 2026 · secure-message.io
- Outbound protection
- Professional rules can encrypt, redirect or block sensitive outbound messages, including holding them for the recipient portal.Read 8 Oct 2026 · secure-message.io
- Recipient verification
- Professional can reject mail to nonexistent users using SMTP callout, LDAP or directory lookups.Read 8 Oct 2026 · secure-message.io
- Secure delivery
- linkRead 20 Sep 2026 · secure-message.io
- Secure recipient portal
- Professional recipients open protected messages in a web portal using a one-time code, without creating an account or installing an app.Read 8 Oct 2026 · secure-message.io
Plans and prices
Strong points and limits
Strong points
- Filters inbound mail before it reaches an existing server.
- Professional portal uses one-time codes without recipient accounts.
- Encryption key is held on the customer host.
- Role-based access, administrator MFA and audit logging.
- Can sit in front of Microsoft 365 without mailbox migration.
Limits
- Single-node appliance runs on Debian 13.
- Maker recommends starting with 2 vCPU and 4 GB RAM.
- Professional costs $690 a year.
- AI Autopilot and classifier are off by default.
Who it suits
It is aimed at healthcare, finance and legal teams, MSPs, internal IT teams and compliance-driven organisations that need a self-hosted mail gateway. It requires a Debian 13 appliance deployment and can route mail ahead of Microsoft 365 or an existing server.
Verdict
Secure Message offers layered inbound filtering and outbound controls in a self-hosted gateway, with additional recipient portal and enterprise features by plan. Confirm that the Debian deployment and recommended starting resources fit the intended mail environment.
Where Specifiction places it
- Email Encryption Software#13 of 318.2
- File encryption tools#12 of 288.1