One front door for every mail server you run.
Scorpion sits between your users' mail clients and your server backends. Move users between servers without them noticing, give old systems modern TLS and IPv6, and check every link again at the moment it is clicked. It runs on your own hardware, from a new enterprise server to a Raspberry Pi.
01What Scorpion does
Clients never see the backend
Mail clients talk to Scorpion, not to your servers. Migrate mailboxes from one server to another and the client neither knows nor cares.
Route by name or by login
One process, one endpoint, many backends. Route by the name the client connects to (TLS SNI, or single-entry-point names like mail.example.com and mail.other-example.com), or by the login itself, looked up by user and domain in MySQL, PostgreSQL or LDAP.
IPv6 without rebuilds
Give IPv6 access to systems that are not IPv6 or dual-stack aware, without touching them.
The latest TLS for everyone
The newest TLS protocols and options for all servers and types, regardless of backend support. A backend stuck on TLS 1.0, or on plain text, still gives its clients TLS 1.3.
Let's Encrypt, automated
Certificates for client access are issued and renewed for you, in one place instead of on every backend.
Click-time URL protection
Links are checked when they are clicked, by MISUIC, locally and optionally remotely. Covers IMAP and POP3 access, and webmail on some systems.
02Protection at the click
A link that was harmless when the message arrived can be weaponised hours later. Scorpion asks again when the recipient actually clicks, using MISUIC, the URL intent classifier from the same ecosystem, which judges what a link is really for and whether its domain belongs to the brand it claims.
- ClickMISUIC classifies the link now
Called locally, or optionally on a remote MISUIC service.
- VerdictAllow, warn or block
Phishing and malware are blocked outright. Likely scams and spam are blocked with a warning the recipient may override.
- AfterwardsThe audit trail tells you who is exposed
If a site is only classified as bad after people have clicked it, you can see exactly who clicked through before that point.
03Audit trails in the interface
Possibly compromised
Every URL click is recorded, so when a site is later classified as bad you can see who went there before it was.
Everyone who got it
With the rspamd service plugin, you are also alerted to everyone who received the message, not only those who clicked.
In the interface
Both views live in Scorpion's own interface, so the answer to "who do we need to call?" is one lookup.
04Who it is for
Mail providers and MSPs
One entry point in front of many backends, routed by name or by login, and migrations your customers never see.
Corporate
Modern TLS and IPv6 in front of the mail systems you already have, and audit trails when a link turns bad.
Small offices
Small enough to run on a Raspberry Pi. Fits the same way as it does at scale.
05Runs anywhere, stays yours
From AWS and enterprise hardware to the humble Raspberry Pi, right back to ancient Solaris 10 servers: anything new or old, big or small. Scorpion is one more component for organisations that must keep data sovereignty in Europe and Australia, whether you host in the cloud or on-premises.
06Licensing
- Licensed by mailbox count, not by email address.
- The count is set at the start of the year.
- If your mailboxes grow during the year, your licence does not change until renewal.
Try it in front of your own mail.
Tell us about your servers and clients and we will scope a pilot on your existing infrastructure.