Predictable pricing per protected domain

One email domain that you point at the gateway — the part after the @. Every mailbox, alias and distribution address on it is covered. Subdomains that receive mail separately count as their own domain.

Up to 250. Within that, a protected domain costs the same with five mailboxes or two hundred, and aliases and distribution addresses are covered too. There is no seat count anywhere in the bill, so a customer hiring people does not change what you pay.

If you are protecting your own organization's domains, the direct rate of $39 per protected domain applies. If you manage domains on behalf of customers, the partner rates apply: from $39 per protected domain, falling as your portfolio grows.

A direct organization pays $39 per protected domain — the same as the entry partner rate. Partners receive lower volume rates as their protected-domain portfolio grows, which is where the partner margin comes from.

No. Your account is pinned to the rate card it was sold on, and publishing a new one does not move you. When we changed the published rates, every account that already existed stayed on the card it had.

This is enforced in the billing code rather than promised in a policy: a statement resolves the rate from your account's own card, and it names that card on the statement so a figure can be checked later. Moving an account to a different card is a deliberate act that is recorded — it cannot happen as a side effect of us changing a price.

No. Archiving is the one metered component, because bytes kept for years are a cost that genuinely does scale.

No setup fee, and it is month to month. There is no minimum term to sign.

PayPal is accepted for the monthly subscription. Billing is month to month with no setup fee and no minimum term, and AI and VirusTotal usage is billed to you by those providers directly rather than passing through us.

Yes — we operate the gateway, including hosting, software updates, signature feeds and maintenance. There is nothing for you to run or patch.

Every enabled and applicable scanning stage runs for each message: sender authentication, network and sender reputation, malware and attachment scanning with document and macro analysis, spam and content analysis, and phishing and impersonation checks. Optional AI analysis and VirusTotal intelligence use accounts you supply and are billed directly by those providers. Long-term message archiving is an optional MailThreatZero add-on billed separately based on retained storage and retention term. Certain capabilities depend on mail-flow configuration or optional integrations.

That depends on your provider, model and how much of your mail is inconclusive after the deterministic stages. AI analysis runs only when the deterministic stages leave a message inconclusive, so most mail is decided without any AI call. You are billed by the provider directly, so you can see and cap it yourself. Start with AI off and turn it on once you have seen your own volumes.

Archiving is available now as a separate add-on. Optional archive storage is billed separately based on retained capacity and retention term. Retention runs from one to seven years depending on the package, with the seven-year package designed for organizations requiring extended retention periods. You buy a bucket and divide it across your domains yourself. Message history and quarantine data for investigation are included with the domain rate and do not need the add-on.

Email support is included with every protected domain. Mail-flow interruptions, widespread false positives, and suspected security incidents receive priority handling. Support terms and response targets are provided with each service plan.