Enterprise Security

8 Layers of Protection. Zero Config.

Every submission passes through an 8-layer anti-abuse pipeline before it reaches your inbox. Enterprise security features come standard.

Anti-Abuse Pipeline

8 Layers Before Your Inbox

Each submission must pass every layer. Most spam is stopped at layer 1 or 2.

Cloudflare-powered bot detection filters out automated submissions before they reach your inbox.

Cloudflare threat scores evaluated per request. Anything above the threshold is blocked automatically.

Max 5 submissions per minute, 50 per hour per IP. Prevents brute-force spam floods.

Max 10 per hour, 30 per day per email address. Stops repeat offenders.

130+ known disposable email providers blocked. Guerrillamail, Tempmail, Mailinator, and more.

Maintain custom blocklists with expiration and hit tracking. Block specific emails or entire domains.

Block specific IP addresses with optional expiration. Hit counts tracked automatically.

Identical submissions within a 1-hour window are automatically flagged and blocked.

Only genuine submissions reach your inbox

Enterprise Security

Authentication, authorization, audit trails, and encryption. Built in from day one.

TOTP-based 2FA with QR setup, token validation, and recovery codes for all user accounts.

Every action logged with timestamp, user, IP, and user agent. Searchable by admin or entity.

View active sessions, revoke access, and manage session lifetimes for your account.

All traffic encrypted with TLS. Auto-provisioned SSL certificates for custom domains.

Your data is fully isolated and private. Dedicated rate limits, quotas, and configuration for your account.

Trusted senders bypass spam checks. Import allowlists in bulk with optional auto-approve.

All security features are enabled by default. No setup, no add-ons, no extra cost.