Secure Message review
A gateway for filtering, outbound encryption, verification and mail administration.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Secure Message is a self-hosted email security gateway for regulated organizations, managed service providers and internal IT teams. It filters inbound mail through Postfix content filtering and reinjection, applies spam scoring and DNSBL checks, and validates SPF, DKIM and DMARC. For outbound messages, rule-based encryption can hold delivery for a secure portal. The product runs on web, Linux and API environments, with encryption keys retained on the customer-controlled host.
Pricing is organized by protected domain rather than user. The free Community plan includes inbound filtering, spam scoring and DNSBL, SPF, DKIM and DMARC checks, quarantine, mail logs and administrator MFA. Professional costs $690 per domain per year, billed annually, and adds anti-phishing and spoof defense, ClamAV anti-malware, advanced filtering rules, recipient verification, a secure message portal and scheduled backups. Enterprise costs $1,490 per domain per year and adds AI Autopilot tuning, eDiscovery and archive search, DLP, disclaimers, unlimited users and domains, node-bound license management, priority support and an SLA.
The main fit is for teams that want gateway controls inside their own infrastructure rather than a user-focused encryption service. Professional supports one-time-code recipient access, encrypted message and attachment storage, and verification through SMTP callout, LDAP or directory lookup. Enterprise extends the administrative scope with DLP, archive search and policy features. Setup and operation require a Debian host and mail-gateway administration, so organizations seeking a fully managed service should consider another approach unless a hosted arrangement meets their needs. Secure Message is also described as built to HIPAA safeguards rather than certified, which matters when formal certification is a requirement.
Secure Message pros and cons
- Where it wins
- Free Community tier covers filtering, authentication checks and quarantine
- Professional adds portal encryption, recipient verification and encrypted backups
- Enterprise adds DLP, eDiscovery, AI tuning and unlimited users and domains
- Where it doesn't
- Requires deployment on a customer-controlled Debian host
- Professional starts at $690 per domain per year
- Hosted or managed operation is available by request only
Secure Message fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update