Spam & malware protection

The filter sits in front of the mailbox.

Spam, malware and phishing are caught before they are delivered — upstream, not in the inbox. We set up the Hornetsecurity service for your domains and look after it.

Vendor: Hornetsecurity, HanoverUpstream — the MX record points to the filterSet-up and support by kyberio

How it works

Upstream, not downstream

An upstream email filter is put in place through your domain's MX record: incoming messages go to the filter first and only then to your mail server or your Microsoft 365 tenant. Whatever is sorted out never reaches your network in the first place.

Checks run in several stages — the sender's origin and reputation, content and attachments, signatures of known malware, conspicuous patterns in bulk mailings, and links that only turn malicious after delivery. Outgoing mail can be filtered as well, so that your domain does not end up on other people's blocklists.

A practical side effect: if your own mail server is unreachable for a while, the filter holds the messages instead of rejecting them. The vendor states up to seven days for this.

  • Put in place through the MX record
  • Multi-stage spam detection
  • Virus protection with continuously updated signatures
  • Phishing and link checks
  • Filtering of outgoing mail
  • Quarantine with release in one click
  • Reports at an adjustable interval
  • Address matching via LDAP possible

Vendor figures

What Hornetsecurity states for the service

We pass on the vendor's figures as what they are: vendor figures, as read on 23 September 2026 — not a commitment from us.

  • Spam detection 99.9%
  • Virus detection 99.99%
  • Misclassifications fewer than 0.00015 — according to the vendor, at most four in a million messages checked
  • Buffering up to seven days if your server cannot be reached

Which values appear as service levels in your contract we clarify with the quote. We put nothing on this page that we have not committed to.

Our role

What we take on

Set-up

Switching MX records, creating domains and addresses, configuring rules and quarantine reports so that they suit your processes.

Domains and DNS

The MX switch is a DNS task. If your zones are with us anyway, it takes a moment.

More

Your own mail server

The filter can also be placed in front of a dedicated mail server with us — mailboxes then stay entirely in your hands.

More

Microsoft 365 in view

If you use Microsoft 365, you should think about archiving, backup and permissions at the same time.

More

Vendor

Hornetsecurity

Frequently asked questions

Do I have to change my mail server?

No. The filter is placed in front through the MX record — whatever sits behind it stays where it is. That applies either way: in front of a dedicated mail server with us just as in front of Microsoft 365, Google Workspace or a server in your own house. The filter is booked on its own, even if the mail server is already with us.

What happens to messages that are sorted out by mistake?

They sit in quarantine. Users receive a report at an adjustable interval and release a message with one click — without anyone from IT having to step in.

Does this also protect against phishing?

Phishing is the part that is hardest to pin down with signatures, which is why filters work with patterns and link checks here. A residual risk remains — it drops noticeably when people are trained.

Where are the emails processed?

In Germany. An upstream filter sees every message before it is delivered — which is why the place of processing is no side issue here. With this service, it stays in the country.

What does it cost?

You get the service through us: one contract, one invoice, one contact. The price depends on the number of mailboxes. Tell us how many there are and which domains belong to them, and you will get a quote.

Sovereignty

Paving the way for digital sovereignty

ISO 27001 based on BSI IT-Grundschutz, BSI-IGZ-0552-2023
BSI-IGZ-0552-2023 ISO 27001 based on BSI IT-Grundschutz Scope: all data centers and all cloud services Security concept
  • Owner-managed since 1997

    As an owner-managed operator with our own data centers, we make our decisions independently and are subject exclusively to German / EU law.

  • 100% made in Germany

    Our data center, product development, and customer support are all based in Germany for your digital sovereignty.

  • 24/7 Customer Support

    We are here for you: 24/7/365 customer support, in English and German

How much lands in your mailboxes today?

Tell us how many mailboxes and domains there are and what sits in front of them today. From that we put together a quote. Feel free to contact me directly.

  • We will get back to you as soon as we can.
  • No obligation, free of charge.

How we process your details is explained in our privacy notice.