Where is my data stored?

Exclusively in our data centers in Germany – no transfer to third countries.

Can I cancel anytime?

Yes. All plans are cancellable monthly, with no long-term commitment.

How quickly is my product available?

Usually within minutes of ordering – fully automated provisioning.

Do you help with migration?

Of course. Our support helps you migrate your existing data free of charge.

NetCell MailGuard Lizenzen

Why NetCell MailGuard licenses

Your benefits at a glance

Full data sovereignty (GDPR)

Runs on your servers in the EU – no third-country transfer, no CLOUD Act, no data processing agreement with third parties.

14 detection layers + sandbox

The complete detection stack runs locally on your server – emails never leave your infrastructure.

Active-active cluster

Fault-tolerant without a master – every node is equal, with automatic failover.

API-first & white-label

Full REST API with webhooks and branding under your own brand.

Who it's for

Typical use cases

MSPs with tenant separation & white-label

Regulated industries (legal, healthcare, public sector)

Hosters bundling email security

Features

Everything you need

Self-hosted on Debian

Installation with a single command on Debian 12/13 (amd64/arm64).

Local attachment sandbox

Detonation of suspicious attachments directly on your server – no cloud upload.

DKIM signing & DMARC reports

Automatic DKIM keys per domain, daily DMARC aggregate reports.

End-user quarantine portal

Daily digest with one-click release (Pro).

Per-domain policies & REST API

Custom thresholds and rules per domain, full API with webhooks.

White-label

Your own logo, product name and colors – cluster-wide (Pro).

Multi-layered protection

14 detection layers

Every email passes through several independent checks – if one doesn't catch the threat, the next one does.

1

SPF validation

Checks the Sender Policy Framework – hard/soft fail configurable per domain.

2

DKIM check

Verifies the cryptographic signature of incoming emails.

3

DMARC authentication

Evaluates the DMARC policy of the sender domain.

4

ARC support

Preserves authentication results across forwarding (RFC 8617).

5

RBL/URIBL blocklists

Reputation lists (including Spamhaus, SURBL) for IPs and URLs.

6

Header anomaly detection

Detects manipulated and forged mail headers.

7

External phishing feeds

OpenPhish, URLhaus and PhishTank – updated hourly.

8

URL shortener resolution

Resolves bit.ly and dozens of other shortening services before scanning.

9

DACH phishing keywords

German-language fraud patterns (Sparkasse, tax office, GEZ, DHL …).

10

Suspicious TLD detection

Self-learning detection of suspicious top-level domains.

11

ML spam classification

Multi-class classifier plus neural backend and reputation scoring.

12

Virus scanning

Antivirus engine with daily signature updates.

13

Local sandbox detonation

Suspicious attachments are run and observed in isolation.

14

Behavior-based file analysis

Detects macros, PowerShell, embedded programs and C2 patterns.

Up and running fast

Ready in 3 steps

1

Choose Free or Pro

Permanently free Free edition or Pro per node.

2

Install on Debian

Installation with a single command (Debian 12/13).

3

Place domains upstream

Add domains and place them upstream via the MX record.

Which option fits?

Managed Antispam or MailGuard licenses?

Both use the same engine with 14 detection layers – you just choose who operates it.

	Managed Antispam	MailGuard licenses
Operation	We operate it (SaaS)	You operate it (self-hosted)
Own server	not required	required (Debian 12/13)
Billing	Base price + tiered price per mailbox	flat price per node (Free available)
Data processing	our data centers in Germany (with DPA)	your own servers (full data sovereignty)
Maintenance & updates	handled by us	on your side / via updates
Ideal for	SMEs without their own IT	MSPs, regulated industries, hosters
Price	ab 5,83 € / mo. (base price)	0 € Free · 58,31 € / node/mo. pro
	Go to Managed Antispam	View plans

Plans

Choose your plan

Cancellable monthly, transparent and with no hidden costs.

MailGuard Free

On your own servers – free forever.

0 €/ month

1 domain · 3 mailboxes
All 14 detection layers
Local attachment sandbox
REST API (read-only)
Cluster, portal & white-label

Select

MailGuard Pro

Self-hosted license – flat price per node. Unlimited domains & mailboxes.

58,31 €/ node/mo.

incl. VAT

Unlimited domains & mailboxes
Active-active cluster (HA)
End-user quarantine portal
White-label & full REST API
Per-domain policies

Select

All prices incl. VAT

FAQ

Frequently asked questions

Where are my emails processed?

Exclusively on your own infrastructure. Emails never leave your servers – only threat intelligence feeds are loaded inbound.

Do I need a data processing agreement (DPA) under Art. 28 GDPR?

No. Since you self-host, you remain the sole processor – no cloud provider is involved as a data processor.

What is the difference between Free and Pro?

Free: 1 domain, 3 mailboxes, all 14 layers, read-only API. Pro: unlimited domains & mailboxes, active-active cluster, quarantine portal, white-label and the full API – billed per node.

How does active-active clustering work?

All nodes are equal, with no master. Configuration is synchronized in encrypted form; if a node fails, DNS MX routing automatically skips it.

What system does MailGuard run on?

Debian 12/13 (amd64/arm64), installation with a single command – native Linux software without Docker or Kubernetes complexity.

Prefer not to run your own server?

Then our Managed Antispam is the right choice – we run the gateway for you, billed per mailbox.

Can I test it first?

Yes – the Pro features can be tested free for 30 days, and the Free edition stays free forever.

Questions about this product?

Our team is happy to advise you without obligation and find the right solution for your project.

Order now Request a consultation