Sophos Secure Message vs SpamHero Business Email Security

Sophos Secure Message is part of Sophos Email, a cloud service for protecting inboxes from phishing, business email compromise, spam, and email-delivered malware. Sophos Email uses AI and machine-learning models, natural-language processing, sender authentication, URL rewriting, and attachment sandboxing to detect threats. Post-delivery protection can retrieve messages later identified as malicious after they reach inboxes. Organizations can set Secure Message policies for selected users, groups, domains, and external recipients. Outbound policies support TLS, S/MIME, push encryption, and portal encryption. With portal encryption, recipients can read and reply to encrypted messages through a secure web portal without maintaining their own encryption infrastructure. Multi-rule data-protection and content-control policies can detect sensitive email data and encrypt it automatically. Sophos Email integrates with Microsoft 365 and Google Workspace and connects threat telemetry with Sophos MDR and XDR. Secure Message policies cannot be configured in Sophos Email Monitoring System mode. A free trial is available through an active Sophos Fusion account or the trial form. Pricing is on request, and there is no free plan.

SpamHero Business Email Security filters incoming email for a domain in the cloud, then forwards clean messages to the customer’s mail server. Its filters cover spam, viruses, and malware, including Microsoft Office macros. A searchable quarantine lets users inspect and recover messages, and three redundant mail servers in separate data centers can queue mail for up to five days when the customer’s mail server is unavailable. SpamHero documents routing Microsoft 365 mail through its service and connects with Microsoft Entra ID to set up valid email addresses; Google Workspace support is also listed. Mail-server communication uses opportunistic TLS, and the service describes enforcing TLS for senders that support MTA-STS. Its REST API uses HTTP Basic authentication and allows 60 requests per minute per key. Support includes 24/7 chat and first-level phone support weekdays from 6am to 6pm Mountain Time. The free trial lasts 30 days and requires no payment information; there is no free plan. Pricing is per domain, with Lite at $5 a month at the introductory annual-prepayment rate.