Security
Security controls designed for real email operations.
Email carries account access, customer conversations, and sensitive business context. Super Mail Hub applies layered controls across the dashboard, mailboxes, and delivery pipeline.
Account and tenant isolation
Session-based access and organization-scoped queries keep each workspace separated. Administrative operations use a distinct authorization boundary.
- Strong password requirements
- Secure, HTTP-only production sessions
- Organization-scoped data access
- Restricted platform administration
Secure client access
Mailbox owners can use protected web sessions or standard encrypted mail-client connections without exposing administrative credentials.
- Encrypted IMAP and SMTP connections
- Mailbox-specific credentials
- Password reset controls
- Session revocation
Mailbox and message protection
Inbound mail is evaluated before it reaches the inbox, while mailbox owners retain practical controls for suspicious senders.
- Spam and phishing scoring
- ClamAV attachment scanning
- Sender allow and block rules
- Automatic Spam and Trash retention
Responsible incident reporting
Please report suspected vulnerabilities privately through the security topic on our contact form. Include the affected URL and reproduction details, but never include passwords or customer message content.
- Private security contact route
- Abuse review tools
- Account access controls
- Auditable payment-event handling