#1 Libraesva

Lecco, Italy Founded 2013 Quoted per mailbox on request 30-day free trial

Best for: Regulated firms that want on-premises or private cloud

• Operating company. LibraCyber S.p.A. (Libraesva Email Security)
• Jurisdiction. EU (Italy)
• Where the data sits. Private cloud or on-premises; the vendor does not name a data centre on the pages reviewed
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

Libraesva has protected business email since 2013 from its base in Lecco, in northern Italy. In 2025 it combined with Cyber Guru, another Italian cybersecurity firm, to form LibraCyber S.p.A., which the two describe as a new European cybersecurity leader.

The core product, Libraesva Email Security, uses layered, AI-assisted protection to stop threats before they reach an inbox, and the group now adds email archiving, DMARC protection and phishing-simulation training around it. That breadth means a buyer can start with the gateway and later consolidate related tools with one supplier if it chooses to.

What sets it apart in this list is deployment. Libraesva still offers a genuine on-premises option next to its private cloud, which most cloud-native gateways no longer do, and it markets itself explicitly as privacy-first for financial services, healthcare and government.

That makes it the natural first call for a buyer whose compliance team wants the mail path inside its own infrastructure, or who cannot accept a shared multi-tenant cloud, and who still wants a vendor that is established, European and independent of the American incumbents.

The caveats are specific rather than fatal. Pricing is quoted per mailbox on request, so there is no number to compare until a sales conversation happens, although a 30-day free trial is offered.

The LibraCyber restructuring is recent, so the contracting entity and terms should be confirmed in writing. And Libraesva runs UK and US regional entities next to the Italian parent, which matters if you want single-country processing. No security certificate is published on the pages we reviewed, so ask for one during due diligence.

Standout feature. A real on-premises deployment from a privacy-first Italian vendor, in a market that has largely moved to cloud-only.

#2 NoSpamProxy

Paderborn, Germany Quoted on request; not published Demo or trial on request; no published free tier

Best for: German-speaking companies wanting encryption built into the gateway

• Operating company. Net at Work GmbH
• Jurisdiction. EU (Germany)
• Where the data sits. Your own server with NoSpamProxy Server, or NoSpamProxy Cloud; the vendor does not name a data centre on the pages reviewed
• Independent checks. "IT Security made in Germany" label
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

NoSpamProxy is built and sold by Net at Work GmbH, an independent, owner-managed company in Paderborn, Germany, that says it operates with no external investors.

The gateway sits between the mail server and the internet, filtering spam, malware and ransomware while also detecting phishing and CEO-fraud attempts. It carries the IT Security made in Germany label and reports more than 6,000 customers, which gives it a larger visible installed base than most of the newer entries here. For a mid-sized company in the German-speaking market, that track record is a reassuring starting point.

The distinguishing feature is how much sits in the box. S/MIME and PGP encryption with automated certificate management, large-file transfer directly from the mail client, and GDPR-compliant disclaimer management are bundled in rather than sold as separate add-ons.

For an organisation that exchanges signed or encrypted mail with partners, banks or authorities, that removes a second product and a second vendor from the stack, and it removes the manual certificate handling that usually makes mail encryption fail in practice after a few months.

Deployment is a real choice between NoSpamProxy Cloud and NoSpamProxy Server on premises, not a cloud product with an on-premises story attached. The trade-offs are plain.

Pricing is quote-only with no published free tier, though a demo or trial is available on request. Brand recognition is concentrated in the DACH region rather than internationally, and choosing the on-premises edition leaves patching and maintenance with you. The pages we reviewed also do not name a hosting location for the cloud edition, so ask for it.

Standout feature. Encryption, large-file transfer and disclaimers come in the gateway, with a genuine cloud-or-on-premises choice.

#3 Retarus Email Security

Munich, Germany Quoted on request; not published Demo or trial on request; no published free tier

Best for: Larger organisations wanting a gateway or a Microsoft 365 API

• Operating company. Retarus GmbH
• Jurisdiction. EU (Germany)
• Where the data sits. Vendor-operated infrastructure marketed as made in Europe; processing location should be fixed in the contract
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

Retarus is a privately owned, independent company headquartered in Munich that describes itself directly: it answers to customers, not investors.

Its Email Security product comes either as a classic secure email gateway or as an API for Microsoft 365, and it includes advanced threat protection with sandboxing, post-delivery protection that keeps re-checking links and attachments after they arrive, and email continuity for outages. The company markets it as the comprehensive solution for email security made in Europe, on infrastructure it states is 100% GDPR compliant.

The fit is an organisation that has outgrown a basic filter and wants a vendor-operated service with an enterprise support organisation behind it.

Post-delivery re-scanning is the technically interesting part: a link that is clean at delivery and weaponised an hour later is exactly the case a gateway that only checks once will miss. Offering both a gateway and an API for Microsoft 365 also lets a buyer choose between changing mail flow and sitting beside the existing tenant, which not every vendor in this list allows.

Email security is one product line inside a wider messaging portfolio that also covers fax and SMS, so it is not the company’s sole focus, and Retarus is better known in German-speaking Europe than elsewhere.

Pricing is quote-only with no published free tier, and a demo or trial is by request. Retarus also operates infrastructure outside Europe, so if you need European-only processing, specify that in the contract rather than assuming it from the made in Europe branding. Ask for the processing locations in writing before signing.

Standout feature. Post-delivery re-checking of links and attachments, offered as either a gateway or an API for Microsoft 365.

#4 Mailinblack

Marseille, France Demo required; no published pricing Demo on request; no published free tier

Best for: French-speaking mid-sized firms worried about spearphishing

• Operating company. Mailinblack
• Jurisdiction. EU (France)
• Where the data sits. Not stated on the pages reviewed
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

Mailinblack is a French cybersecurity publisher based in Marseille with more than twenty years of history.

Its Protect product filters inbound mail across six named threat categories: anti-phishing, anti-spam, anti-malware, anti-spearphishing, anti-ransomware, and link analysis that examines URLs at the moment they are clicked as well as at delivery. The company says it analyses more than six billion emails a year and integrates natively with Microsoft 365, which is where most of its mid-sized customers are likely to run their mail.

Its positioning is deliberate. Naming spearphishing as its own detection layer, rather than folding it into generic phishing, signals a focus on targeted attacks against individuals rather than mass spam, which is where the money is lost in practice.

Click-time link analysis is the second useful idea, because it addresses the link that was harmless when the message arrived and was switched to something malicious afterwards. Together they describe a product aimed at the realistic threats a small finance or HR team faces.

The limits are plain. Pricing is demo-gated with no published trial terms, so you cannot test the product before a sales conversation.

Six billion emails a year is a smaller processing base than the largest global gateways handle, though that says little about detection quality for a mid-sized firm. Brand recognition is concentrated in French-speaking Europe, so support and documentation in other languages should be checked. It is also a cloud filter with a Microsoft 365 integration rather than an on-premises product, and it names no hosting location on the pages reviewed.

Standout feature. Click-time link analysis plus a named anti-spearphishing layer, aimed at targeted attacks rather than bulk spam.

#5 SpamTitan (TitanHQ)

Galway, Ireland Quoted on request through a quote form; not published Demo or trial on request; no published free tier

Best for: MSPs and small IT teams that resell several security layers

• Operating company. Copperfasten Technologies Ltd, trading as TitanHQ
• Jurisdiction. EU (Ireland)
• Where the data sits. Not stated on the pages reviewed
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

SpamTitan is built by TitanHQ, the trading name of Copperfasten Technologies Ltd, which is registered in the Republic of Ireland and based in Galway.

It blocks spam, viruses, malware, ransomware and links to malicious websites, and TitanHQ markets multiple layers of analysis and detection methods specifically for business email compromise. It works natively alongside Microsoft 365, which is where most of its customers sit. For a buyer inside the EU that wants an Irish, English-speaking vendor, that combination is a straightforward fit with few surprises.

Its identity is the managed-service-provider channel. TitanHQ also sells WebTitan for DNS filtering and ArcTitan for email archiving, so an MSP that already resells those can add mail filtering from the same supplier and the same management portal.

That is a commercial fit more than a technical one, and it shows in how the product is sold: bundles and quote forms rather than self-service checkout. For an MSP managing dozens of small clients it is a sensible default, and for a single company it is simply one of several filters.

The weaknesses follow from that. Pricing is quote-only through a form, with no published rates and no published free tier, and a demo or trial is by request.

The direct-to-enterprise buying experience is thinner than for vendors that sell mainly to end customers, and its independent footprint is smaller than the largest global gateways. It is an Irish company inside the EU, but we did not find a named hosting location or certificate on the pages reviewed, so those belong in your due diligence questionnaire.

Standout feature. A channel-built filter that pairs with DNS filtering and archiving from the same Irish vendor.

#6 IKARUS mail.security

Vienna, Austria Quoted on request; not published Demo or trial on request; no published free tier

Best for: Buyers who want everything kept in-house in Austria

• Operating company. IKARUS Security Software GmbH
• Jurisdiction. EU (Austria)
• Where the data sits. Development, data processing and support stated to be in-house in Austria
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

IKARUS Security Software GmbH is headquartered in Vienna and states that all software development, data processing and support for mail.security are conducted in-house in Austria, with no subsidiary network to track.

The product blocks spam, phishing, malware and dangerous URLs through content and behaviour analysis, and it re-checks links in real time both when a message is delivered and again at the moment a user clicks. It is a straightforward filtering product from a company that has made antivirus technology for many years and keeps the whole service within one country.

That single-country statement is the product’s main argument, and it is a stronger claim than the generic European-hosting line most competitors make.

For an Austrian or German public body, or a supplier to one, a vendor that says development, processing and support are all domestic simplifies the transfer analysis considerably, because there is no subprocessor chain to reconstruct. It also makes accountability simple: one company, one country, one set of people who answer the phone when mail stops arriving. That is a point worth confirming with the vendor before relying on it.

There are two caveats. Sandboxing for zero-day files is a separate Advanced Threat Protection add-on built on Trellix Intelligent Virtual Execution, so you pay extra for it and a US-owned engine sits in that part of the chain.

And IKARUS is the smallest vendor in this set by public footprint, with quote-only pricing and no published free tier. IKARUS also offers S/MIME certificates through a partnership with Certum for encryption and signing, which is useful but is a partner product rather than a native capability.

Standout feature. The only entry that states development, data processing and support all stay inside one country.

#7 SEPPmail

Neuenhof, Switzerland No public price list; quote or demo on request Demo on request

Best for: Organisations where encrypted and signed mail is the main requirement

• Operating company. SEPPmail AG
• Jurisdiction. Switzerland (adequacy decision, outside the EEA)
• Where the data sits. SEPPMAIL.cloud in data centres in Germany and Switzerland; also on-premises, hybrid or alongside Microsoft 365
• Source code. Closed source
• Replaces. Zivver, Mimecast, Proofpoint Email Encryption

SEPPmail AG in Neuenhof, Switzerland, makes a secure email gateway that combines encryption, digital signing and anti-spam. Its signature feature is GINA, a recipient-friendly mode that lets an external partner read an encrypted message without installing certificates or software, alongside large file transfer.

The cloud edition, SEPPMAIL.cloud, is hosted in data centres in Germany and Switzerland, and the product can also be run on-premises, in a hybrid setup or alongside Microsoft 365, so the deployment decision stays with the customer rather than being dictated by the vendor’s cloud.

The fit is distinct from the filter-first vendors here. Where Libraesva or Retarus lead with detection, SEPPmail leads with confidential exchange, which makes it the more natural choice for law firms, healthcare organisations, banks and any company that regularly sends sensitive documents to people who do not run their own certificate infrastructure. Its cloud filter against spam, phishing and malware covers the baseline, so a buyer can consolidate filtering and encryption in one gateway instead of running two separate products.

It is also a Swiss company, so it sits outside the EU and the EEA, covered by an adequacy decision rather than membership, and a tender that requires EU establishment could exclude it. There is no public price list, with a quote or demo on request.

Detection-focused competitors will usually be stronger specialists on business email compromise, so read SEPPmail as encryption plus filtering, not as a pure detection layer, and ask for independent test results during evaluation. A pilot with real external recipients will show how well GINA works in practice.

Standout feature. GINA lets an external recipient open encrypted mail without installing anything, which is where most gateway encryption falls over.

#8 xorlab

Zurich, Switzerland No public price list; demo and attack simulation on request Demo and attack simulation on request

Best for: Microsoft 365 estates worried about targeted phishing and fraud

• Operating company. xorlab AG
• Jurisdiction. Switzerland (adequacy decision, outside the EEA)
• Where the data sits. Cloud customer data processed and stored in European data centres by Europe-based staff; on-premises and hybrid also offered
• Source code. Closed source
• Replaces. Proofpoint, Abnormal Security, Microsoft Defender for Office 365

xorlab AG in Zurich builds behavioural email security. Rather than relying on signatures alone, its system learns the relationships and communication patterns between senders and recipients, which is how it aims to catch business email compromise, credential phishing, spearphishing and QR-code phishing. It can run on-premises, hybrid or in the cloud, and it can complement or replace a gateway or the protection built into Microsoft 365, which makes it unusually flexible to pilot next to whatever a company already runs.

This is a different job from a classic filter. A behavioural layer is built to catch the message that is syntactically clean, comes from a plausible address and asks someone to change a bank account number.

That is where signature-based gateways are weakest, and it is why xorlab is best read as an addition to a Microsoft 365 estate, or as the detection layer in front of a gateway, rather than as a drop-in replacement for archiving, continuity or encryption features that the suite vendors provide.

Cloud customer data is stated to be processed and stored in European data centres by Europe-based staff, which is a clearer statement than many in this list make.

It is a Swiss company, so it is outside the EU and the EEA but covered by an adequacy decision. There is no public price list, only a demo and an attack simulation on request, and no named certificate on the pages reviewed. The attack simulation is worth taking up, because it shows what the product catches in your own mail.

Standout feature. A behavioural model of who normally writes to whom, which catches fraud that a signature engine sees as perfectly clean.

#9 Iberlayer Email Guardian

Tres Cantos (Madrid), Spain No public price list 30-day free trial without registration or card

Best for: Spanish and public-sector buyers who need a certified filter

• Operating company. Iberlayer S.L.
• Jurisdiction. EU (Spain)
• Where the data sits. Not stated on the pages reviewed
• Independent checks. ISO/IEC 27001:2022; listed in the Spanish CCN CPSTIC product catalogue (product 529)
• Source code. Closed source
• Replaces. Proofpoint, Mimecast, Microsoft Defender for Office 365

Iberlayer S.L. in Tres Cantos, near Madrid, runs Email Guardian, a cloud email filter that includes real-time sandbox analysis of content, URLs, QR codes and attachments.

It holds ISO/IEC 27001:2022 and is listed in the Spanish CCN CPSTIC product catalogue as product 529, which is the register Spanish public bodies consult when they need a security product that has been assessed by the national cryptologic centre. For a buyer who needs a documented credential rather than a marketing claim, that is the clearest evidence among the newer entries here.

That catalogue listing is the reason to put it on a shortlist. For Spanish administrations and their suppliers, a product in the CCN catalogue is easier to procure than one without.

Beyond the credentials the product also offers SOC integration with encrypted real-time log forwarding and a control API protected by multi-factor authentication, which matters to security teams that want mail events in their SIEM instead of in a separate vendor dashboard that nobody checks until something has already gone wrong.

The company is small and regionally focused, so documentation, support and references will lean towards the Spanish-language market. Pricing is not published, though a 30-day trial is offered without registration or card, which is the most open trial term in this list.

It does not name a data centre on the pages we reviewed, so hosting is a question for the data processing agreement, and the feature set is a filter rather than an encryption or archiving suite. Pair it with other tools if you need those.

Standout feature. The only entry combining an ISO 27001 certificate with a national catalogue listing, plus a card-free 30-day trial.

#10 Alinto Cleanmail

Lyon, France No public price list Free trial on request

Best for: Organisations wanting a simple relay in front of any mail server

• Operating company. Alinto Group
• Jurisdiction. EU (France)
• Where the data sits. Private cloud hosted in the EU (France) or Switzerland, or deployed on-premises
• Source code. Closed source
• Replaces. Mimecast, Barracuda, Proofpoint Essentials

Alinto Group in Lyon is a French mail-infrastructure vendor, and Cleanmail is its anti-spam and anti-virus relay that sits upstream of any mail server.

That makes it unusually platform-agnostic: it does not need Microsoft 365 or any particular mail platform, and it can be placed in front of an on-premises Exchange, a hosted mailbox or a mix of both. It also offers emergency webmail and optional email archiving of up to ten years, so a mail outage does not leave users without access to their messages.

Hosting is a private cloud in the EU (France) or Switzerland, or an on-premises deployment, which is a more specific hosting statement than most of the cloud-only filters in this list make. The company’s background in running mail infrastructure gives it operational depth in the plumbing of mail delivery, and the French-hosted option is a straightforward answer for a French public or regulated buyer who has to explain where the mail goes and who operates the servers that carry it.

The honest limits are scope and visibility. Cleanmail is a filter and relay with continuity features, not a behavioural detection platform for business email compromise, and the vendor page does not claim to be one.

There is no public price list, only a free trial on request, and no certificate was found on the pages reviewed. Teams that already run everything in Microsoft 365 and want inbox-level protection may find an add-on product easier to deploy than a relay that requires a change to mail routing.

Standout feature. A relay that goes in front of any mail server, with hosting in France or Switzerland, from a vendor that runs mail infrastructure for a living.

#11 e-securemail (Secuserve)

Villeurbanne, France Founded 2003 No public price list; demo on request Demo on request

Best for: French organisations that want filtering hosted entirely in France

• Operating company. Secuserve
• Jurisdiction. EU (France)
• Where the data sits. Stated as 100% hosted in France
• Source code. Closed source
• Replaces. Mimecast, Barracuda, Proofpoint Essentials

e-securemail is the email filtering service of Secuserve, a company in Villeurbanne, next to Lyon, operating since 2003. It combines anti-spam, anti-phishing and anti-virus using 20 detection engines, with per-user quarantine and DMARC reports.

There is a dedicated edition for Microsoft 365 and a continuity service for outages, all delivered as software as a service with French-speaking support. For a small or mid-sized French organisation, that is a complete filtering setup without any appliance or server to maintain. Ask for the supported mail platforms and the exact failover behaviour during a trial.

The headline claim is location: the service states that everything is hosted in France.

For a French public body, a regulated profession or any buyer whose data protection officer wants a domestic processor on paper, that is a short, checkable sentence, and it is stronger than the generic EU statement most vendors in this list offer. The company has been in business for over two decades, so its history is not in question, and French-language support removes friction for staff who are not comfortable in English.

Where it is thinner is independent evidence and breadth. There is no public price list and only a demo on request.

No certificate is published on the pages we reviewed, and the product is a filtering and continuity service rather than an encryption suite or a behavioural detection layer. Using 20 engines is a detection-breadth claim that is hard to benchmark from the outside, so a trial on live mail remains the real test, and a buyer outside France should check the English-language documentation first.

Standout feature. A plain statement that hosting and support are entirely in France, from a vendor that has run the service since 2003.

#12 Topsec Cloud Solutions

Dublin, Ireland Founded 2002 Quote on request Free trials of Inbox Protect and DMARC

Best for: Small IT teams wanting one managed email security supplier

• Operating company. Topsec Cloud Solutions Limited
• Jurisdiction. EU (Ireland)
• Where the data sits. Not stated on the pages reviewed
• Source code. Closed source
• Replaces. Proofpoint Essentials, Mimecast, Microsoft Defender for Office 365

Topsec Cloud Solutions Limited in Dublin, established in 2002, is a managed email security provider that bundles several layers: filtering with attachment sandboxing and URL scanning, Inbox Protect for Microsoft 365 with VIP impersonation protection, managed DMARC, phishing awareness training and email continuity.

The pitch is one supplier for the whole email-security stack rather than a single filter, which suits organisations that would otherwise have to coordinate several vendors and several renewal dates. Because Topsec is a managed provider, much of the day-to-day tuning and reporting is done for the customer.

That makes it different from the product-first vendors in this list. A smaller IT team that does not want to run DMARC enforcement, awareness campaigns and a filter as three separate projects gets a managed service from an Irish company, and free trials of Inbox Protect and DMARC allow a staged start instead of a single large commitment.

Ireland is inside the EU and the EEA and English is the working language, so the jurisdiction and the documentation are both easy for most buyers.

The limits are the usual ones for this set. Pricing is by quote with no public list, and the data location is not named on the pages we reviewed.

A bundle also means a larger single commitment than a stand-alone filter, and the strength of each layer is harder to judge individually. For a buyer who wants best-of-breed in each layer, a specialist detection vendor plus a separate DMARC tool will give more control, and no certificate is published on the pages reviewed.

Standout feature. Filtering, managed DMARC, awareness training and continuity in one managed service, with trials of the Microsoft 365 and DMARC parts.