- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
SpamTitan Email Security
Spam and malware reach your mail server before anyone looks. They should be stopped at the MX record — SpamTitan filters mail at the MX — in TitanHQ’s cloud clusters or on a gateway you host — with Bayesian learning, dual antivirus and a sandbox, before mail reaches Microsoft 365 or your server.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The TitanHQ platform family
This page covers SpamTitan Email Security — TitanHQ’s MX gateway, in the cloud or self-hosted. The rest:
Quick facts
30-second orientation- Product
- An MX-record email gateway that filters inbound and outbound mail, in TitanHQ’s cloud or on your own hypervisor
- Maker
- Built by TitanHQ of Galway, Ireland; owned by CyberSentriq, with Redstor, from June 2025 and led by Myles Bray
- Lineage
- The first SpamTitan appliance shipped in 2004; SpamTitan 9 arrived in 2023 and the current line is Skellig 9.07
- Price
- Not published; a free trial, then a quote from an MSP or TitanHQ in dollars, euros or pounds, never rupees
- Detection
- Bayesian auto-learning, heuristics, dual antivirus scanning and a sandbox for suspicious files
- Deployment
- Cloud by an MX change, or SpamTitan Gateway on VMware, Hyper-V or an ISO install
- Bundle
- Sold alone, or with PhishTitan as the “Secure” bundle: gateway at the MX plus an API layer in Microsoft 365
- Testing
- TitanHQ reports VBSpam+ awards from Virus Bulletin for the last quarter of 2024 and the first of 2025
- India
- No India mail cluster; Evanti Tech (distributor) and Pace Infotech (MSP) sell TitanHQ in India
- In India via
- TechBag — MX cut-over plan, quote in INR with GST, quarantine set-up
Understand email gateways before you buy one
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is an email security gateway?
A gateway receives your domain’s mail first, through the MX record, and passes on only what it judges clean.
Filtering left to the mail server vs an MX gateway — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Filtering left to the mail server | SpamTitan Email Security |
|---|---|---|
| Where filtering happens | Inside the mail server, if at all | At the MX, before mail reaches your host |
| Attachments | One antivirus engine on the server | Two engines, then a sandbox for doubtful files |
| Spam rules | Hand-written rules nobody maintains | Bayesian learning tuned to your own mail |
| Lost messages | Users email IT to hunt for them | Quarantine digests users act on themselves |
| Many client domains | One server or tenant at a time | One multi-tenant console for the MSP |
| What it is NOT | — | In-mailbox API protection, Teams cover or a public price |
The cheapest test is TitanHQ’s free trial: move one low-risk domain’s MX, watch a week of quarantine, and compare it with what your current filter caught.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
MX
You repoint a domain’s MX records to a SpamTitan cluster — US1 to US4, EU1, UK1, CA1, or AP1 on Sydney IP ranges — so inbound mail is filtered before your mail host sees it.
Filters
Recipient verification and greylisting drop junk early; Bayesian auto-learning, heuristics, two antivirus engines and a sandbox for doubtful files then score what remains.
Quarantine
Held mail waits in quarantine with digest reports; allow and block lists apply per user, domain or domain group, and LDAP or Active Directory sync keeps recipients current.
Gateway
The same filter as a virtual appliance on VMware or Hyper-V, or an ISO install. You patch it yourself, which mattered for CVE-2024-45438, fixed in 8.00.101 and 8.01.14.
An MX gateway in TitanHQ’s cloud or on your own hypervisor — mail is scored and quarantined before your server sees it.
Nine capabilities. Filter, inspect, manage.
SpamTitan checks every message at the MX record, before it reaches your mail server.
Learns your own spam
Bayesian auto-learning adjusts to the mail your users actually receive, while heuristics catch patterns no signature describes yet.
Two engines per attachment
Dual antivirus scanning checks every attachment with two engines, so one vendor’s missing signature is not the only line of defence.
Junk dropped at the door
Recipient verification refuses mail for addresses that do not exist, and greylisting delays unknown senders before content scanning starts.
Detonate the doubtful file
Suspicious attachments are opened in a sandbox to watch what they do, catching malware that static antivirus signatures would pass.
What leaves is scanned too
Outbound scanning checks the mail your users send, which limits how far a hijacked account can push spam or malware to partners.
Spoofing checks in 9.07
The Skellig 9.07 release added anti-spoofing controls and refreshed quarantine reports, according to TitanHQ’s release notice.
Users release their own mail
Digest reports let each user review and release held messages, so IT stops fielding “where did my email go” tickets one by one.
LDAP and AD sync
Users and recipient lists sync from LDAP or Active Directory, so new starters are covered and leavers drop out without manual edits.
One console for every client
MSPs run every customer from a multi-tenant console with APIs, under TitanHQ’s MSP Partner Program with bundle pricing options.
Watch SpamTitan in action
SpamTitan for businesses and for MSPs, the onboarding walk-through, and the SpamTitan 9 launch.
Email Anti-Spam Solution for Business
What SpamTitan filters and how a business switches it on, from TitanHQ’s own channel.
Email Anti-Spam Solution for MSPs
The same gateway seen from the partner side: running filtering for many customers at once.
SpamTitan Onboarding Guide
Adding a domain, routing mail through SpamTitan and setting first policies, step by step.
SpamTitan 9: Unveiling the Next Generation of Email Security
The SpamTitan 9 release that the current Skellig 9.07 line builds on.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Spam and malware cost time on every mailbox. SpamTitan filters them at the MX, in the cloud or on site.
Here’s what genuinely sets it apart — and exactly where it stops.
A gateway you can run in the cloud or on your own hardware
Most filters in TechBag’s Email Security guide are cloud-only. SpamTitan offers both: the cloud service, reached by an MX change, and SpamTitan Gateway, a virtual appliance for VMware or Hyper-V. That suits a firm whose mail server stays on site or whose policy keeps filtering in-house.
Built to be resold by MSPs to small businesses
TitanHQ is sold mainly by MSPs; in June 2026 CyberSentriq put its reach at 125,000 SMBs, served by circa 4,000 MSP and VAR partners. A multi-tenant console with APIs, bundle pricing and round-the-clock priority support let one engineer run filtering for dozens of small customers.
Independent test results, as the vendor reports them
TitanHQ reports a VBSpam+ award in Virus Bulletin’s Q4 2024 test, with the top overall score of 11 products, and again in Q1 2025, when it put the phishing catch rate at 99.99%. These are the vendor’s summaries of an independent test; check the current quarter before relying on them.
Where it stops
SpamTitan filters at the MX. It does not work inside Microsoft 365, pull back delivered mail or cover Teams and Slack; that is PhishTitan’s job. No price is published, no cluster is in India, and the self-hosted Gateway needs patching: CVE-2024-45438 (CVSS 9.1) hit older builds.
The numbers behind the platform
What your SpamTitan rollout looks like
Inventory domains and relays
List every domain, the mail host behind it and any outbound relays, and note who releases quarantined mail today.
Choose cloud or Gateway
Decide between a cloud cluster and the self-hosted Gateway, and whether PhishTitan joins in the Secure bundle.
Trial one domain
Use the free trial to point one low-risk domain’s MX at a cluster, sync users from AD and tune greylisting.
Measure, then cut over
Compare caught spam, false positives and quarantine releases with the old filter, then move the remaining MX records.
Lock the mail host down
Let your mail server accept mail only from SpamTitan, switch on outbound scanning and schedule user digests.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“We changed the MX records on a Friday afternoon. By Monday the junk complaints had stopped and nobody noticed the cut-over.”
“Our clinic’s Exchange server stays on site, so the Gateway appliance on Hyper-V decided it over the cloud-only filters.”
“Forty small clients sit in one console. Adding a new domain takes minutes, and per-client quarantine digests go out alone.”
“Greylisting cut the volume, but a supplier’s invoices arrived late in week one until we allow-listed their domain.”
“After the CVE notice we found our on-site Gateway two builds behind. Patch it like any other internet-facing box.”
“It filters well, but we needed PhishTitan as well for clean-up inside mailboxes, and the joint quote took a few rounds.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the email security market — tap any vendor to see why it sits where it does.
TechBag Email Gateway Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quoted per user through MSPs; VBSpam+ results reported by TitanHQ.
Deployment Choice × Threat Depth
The grid nobody publishes — how many ways the filter can be deployed (cloud MX, API, on-premises) vs how deep it goes on targeted and BEC threats.
Cloud MX or self-hosted Gateway, no API mode; BEC depth sits with PhishTitan.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
SpamTitan vs the email gateway field
Against N-able Mail Assure, Barracuda, Proofpoint, Mimecast and Heimdal — on deployment, on-premises options, price, detection, archive and India.
| Dimension | SpamTitan Email Security | N-able Mail Assure | Barracuda Email Protection | Proofpoint Email Protection | Mimecast Email Security | Heimdal Email Security |
|---|---|---|---|---|---|---|
| What it is | MX gateway for SMBs | MSP filter + archive | Tiered email suite | Gateway + behavioural | SEG or M365-integrated | Filter beside endpoint |
| Deployment | MX change, 8 clusters | Hosted gateway | MX, API or both | Gateway or API | Gateway or M365 API | MX or M365 connector |
| On-premises option | Gateway appliance | Cloud only | Appliance option | Legacy appliance | Cloud only | Cloud only |
| Pricing model | Quote, per user | Quote, unit unclear | Per user, by tier | Per user, two lines | Per mailbox, S1–S3 | Per device, per year |
| Published entry price | Not published | Not published | $3–12/user/month | $2–5.86/user/month | ~$5–15 reported | Not published |
| Included vs add-on | API layer is separate | Archive + continuity in | Top tiers add more | Each module a SKU | Extras bought on top | Fraud is extra |
| Scale and tenancy | Built for MSP tenancy | One console, all clients | SMB to mid-market | SMB to enterprise | 42,000+ organisations | Limits not published |
| Detection and BEC | Strong filter, BEC basic | Pooled intelligence | Gateway + AI layer | TAP + behavioural AI | Time-of-click, BEC | Fraud vectors extra |
| Console and integrations | Multi-tenant + LDAP | Beside the N-able stack | Incident Response, DMARC | DLP, archive, training | Human Risk platform | Heimdal dashboard |
| Archive and governance | ArcTitan is separate | Archive included | DMARC in the suite | Add-on governance | Archive, legal hold | 365-day archive |
| India storage region | No India cluster | Not documented | Not documented | Mumbai data centre | Singapore for APAC | EU, US, UK or UAE |
| Support | 24h partner support | Through N-able | Bengaluru presence | Thoma Bravo-owned | Permira-owned | Mumbai office |
| Lock-in and exit | Repoint MX to leave | Archive to export | Tiered suite gravity | Add-ons bind | Archive holds you | Check archive export |
| Best fit | MSP-run SMB mail | MSPs wanting archive | One-vendor mid-market | India data, deep intel | Archive-heavy estates | Heimdal endpoint users |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose SpamTitan if…
- ✓You want a plain MX gateway in front of Microsoft 365 or an on-site mail server, quoted after a free trial
- ✓Policy keeps filtering on your own hardware — SpamTitan Gateway runs on VMware or Hyper-V, or installs from ISO
- ✓You are an MSP running many small customers from one multi-tenant console, with PhishTitan available to bundle later
Compare alternatives if…
- ✓Cloud filtering must stay in India — Proofpoint runs a Mumbai data centre, while SpamTitan has no Indian cluster
- ✓You want a price before a sales call — Proofpoint Essentials and Barracuda both publish per-user rates
- ✓Archiving and continuity must come in the same licence — N-able Mail Assure includes both
Do not expect…
- ✓Removal of mail after delivery from inside Microsoft 365 — that is PhishTitan, licensed separately
- ✓A Gartner Magic Quadrant placement; the evidence TitanHQ offers is VBSpam results it reports itself
- ✓Teams, Slack or SharePoint coverage, or a SpamTitan price list in rupees
SpamTitan Email Security is one of 30 email security products TechBag carries. The Email Security guide narrows them to a shortlist and shows the reasoning. →
What does unfiltered mail cost your IT team?
Drag the sliders (protected mailboxes; IT-staff hour cost). Estimates model IT time spent on spam complaints, lost-mail searches and clean-up after malicious mail at an assumed 1.5 hours per mailbox a year, with 70% of it removed by filtering at the MX and self-service quarantine. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Not published: TitanHQ quotes SpamTitan per user, through MSPs or direct, in dollars, euros or pounds after a free trial — alone, or with PhishTitan in the Secure bundle. Figures on comparison blogs come from placeholder data, not a price list. TechBag gets the quote and bills in INR with GST.
SpamTitan Cloud
Best for MSPs and firms on Microsoft 365
- Quoted per user; free trial first
- MX gateway on US, EU, UK, CA or AU clusters
- No India cluster; no published price
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Secure bundle
Best when you also want in-mailbox clean-up
- SpamTitan plus PhishTitan, quoted together
- Gateway at the MX, API inside Microsoft 365
- Self-hosted SpamTitan Gateway also quoted
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Which domains, mail hosts and outbound relays are in scope, and does any application send mail straight to the internet?
Cloud cluster or the self-hosted Gateway on VMware or Hyper-V — and who patches it if you choose the appliance?
Is filtering Indian mail in a US, EU, UK, Canadian or Australian cluster acceptable to your DPO and auditors?
Do you need clean-up of delivered mail inside Microsoft 365? That is PhishTitan, so price the Secure bundle too.
Will recipients sync from LDAP or Active Directory, and who owns the allow list for suppliers and partners?
Who releases held mail — users from their digests, or IT — and how long should quarantined messages be kept?
If you run the Gateway, is it on build 8.00.101, 8.01.14 or later, so CVE-2024-45438 is closed?
Is the quote per user or per mailbox, what does it include, and can a partner bill it in INR with GST?
Questions buyers ask
Ready to evaluate SpamTitan?
Map your domains and mail hosts first, or let a TechBag advisor run a trial that puts one domain behind SpamTitan before the full MX cut-over.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.