Sophos Secure Message vs Xeams

Sophos Secure Message is part of Sophos Email, a cloud service for protecting inboxes from phishing, business email compromise, spam, and email-delivered malware. Sophos Email uses AI and machine-learning models, natural-language processing, sender authentication, URL rewriting, and attachment sandboxing to detect threats. Post-delivery protection can retrieve messages later identified as malicious after they reach inboxes. Organizations can set Secure Message policies for selected users, groups, domains, and external recipients. Outbound policies support TLS, S/MIME, push encryption, and portal encryption. With portal encryption, recipients can read and reply to encrypted messages through a secure web portal without maintaining their own encryption infrastructure. Multi-rule data-protection and content-control policies can detect sensitive email data and encrypt it automatically. Sophos Email integrates with Microsoft 365 and Google Workspace and connects threat telemetry with Sophos MDR and XDR. Secure Message policies cannot be configured in Sophos Email Monitoring System mode. A free trial is available through an active Sophos Fusion account or the trial form. Pricing is on request, and there is no free plan.

Xeams is an email server and spam firewall that can run standalone, sit in front of another mail server, or operate in hybrid mode. It supports SMTP, POP3, and IMAP, alongside email technologies including DKIM, SPF, DMARC, and MTA-STS. Filtering uses sender reputation, authentication checks, attachment and content rules, Bayesian analysis, and virus checks. Administrators use a web interface for live monitoring, logs, reports, retention settings, and tiered administration. Quarantined messages are kept on the server for 15 days by default and can be reached through the web interface or an IMAP client. Integrations include Active Directory and OAuth 2.0 outbound relaying for services such as Microsoft Exchange Online or Google Workspace. Outbound tools include DKIM signing, REST APIs, webhooks, campaigns, read receipts, and header sanitization. A new installation has Enterprise features for 30 days before converting to Community Edition unless licensed. Community Edition is free for up to 5 personal hobby users when spam filtering is used; its spam filtering is otherwise limited to 5 users. Enterprise Edition with Support is $300 a year per deployed instance; Enterprise per-user prices vary by tier.