Home Solutions Cybonet
PineApp Mail Secure · SEG · anti-spam · BEC
Cybonet logo

Email is read by
everyone. Protecting it is your job.

PineApp Mail Secure is a Secure Email Gateway from Cybonet. It protects mail in several layers: anti-spam, anti-phishing, BEC, anti-malware, sandbox and DLP. It runs on-prem or in the cloud, with no third-party dependencies for the public sector and banks.

22 years
in the email security market. Cybonet was founded in Israel in 2002.
5000+
organizations use PineApp Mail Secure worldwide.
99.5 %
spam catch rate in an average installation, false positives < 0.001%.
on-prem
fully local deployment, with no traffic leaving the network.
Mail flow

PineApp sits in front of your mail server and decides what gets through.

The gateway works as an MX relay. Every message passes a multi-engine check and is then delivered to your server or held in quarantine.

01 · Internet
Inbound mail
MX query
→
02 · PineApp Mail Secure
Multi-engine SEG
8 layers of checks · ML BEC
→
03 · Mailbox
Exchange / M365
Only clean mail
Layers of protection

Eight engines for every email.

01
Connection reputation
SPF, DKIM, DMARC, ARC, RBL/DNSBL, greylisting.
SMTP
02
Anti-spam engines
Cybonet engine + Bayesian + content rules. Multi-language, including Uzbek and Russian.
ML + rules
03
Anti-phishing
URL reputation, look-alike domains, lure analysis, header anomalies.
URL · ML
04
BEC / Spear-phishing
Display-name spoofing and a finance-related ML model trained on your normal communication patterns.
ML
05
Anti-malware
Several antivirus engines, signature-based and heuristic.
multi-AV
06
Sandbox
Runs suspicious attachments and URLs in a sandbox to see what they do.
sandbox
07
DLP & outbound
Checks outgoing email for personal data, card data, tax IDs and custom patterns.
policy
08
Archiving & eDiscovery
Full logging and retention for audits and compliance.
archive
Deployment

Three ways to deploy: appliance, VM or cloud.

PineApp Mail Secure comes in three forms. All three have the same features and one management console.

Hardware appliance

A ready-made 1U device for the data center. Hot-swap drives, redundant power, IPMI.

Virtual appliance

VMware, Hyper-V, KVM, Nutanix AHV, Proxmox. Easy scaling in cluster mode.

Cloud / SaaS

A Cybonet-managed SaaS for those who want to avoid on-prem infrastructure.

CYBER BOOST × Cybonet

We’ll deploy it in a week.

We supply PineApp Mail Secure to banks, telecom operators and the public sector in Uzbekistan. We help with the MX cutover, DLP policies, BEC rules and administrator training.

5-7 days
typical deployment time, including the MX switchover and policy configuration.
RU/UZ
localized rules, anti-spam and employee training.
M365
runs in parallel with Microsoft Defender and Exchange Online Protection.
L1–L3
local support in Tashkent, with escalation to Cybonet R&D.
FAQ

Frequently asked questions about Cybonet.

What is PineApp Mail Secure?
PineApp Mail Secure is a Secure Email Gateway (SEG) that sits in front of your mail servers. Every inbound and outbound email is checked for spam, phishing, BEC, malware, links and attachments. It supports on-prem (a physical or virtual appliance) and cloud modes.
Which mail systems does it work with?
Microsoft 365, Microsoft Exchange (2013+), Postfix/Sendmail on Linux, Zimbra, IceWarp and Communigate Pro. It works as the MX or as an inline relay and supports SPF, DKIM, DMARC, TLS, S/MIME and ARC.
How does it protect against BEC?
The BEC module checks the context of each email: lookalike senders (lookalike domains, display-name spoofing), unusual financial requests and messages that don’t match normal patterns. An ML model learns how people in your company usually communicate.
What about archiving and auditing?
PineApp Mail Secure keeps every processed email with its metadata for compliance, audits and investigations. Administrator and end-user quarantines let you deal with suspicious messages without losing legitimate email.
Is it suitable for the public sector in Uzbekistan?
Yes. PineApp Mail Secure can run fully on-prem (a virtual or physical appliance), so no traffic has to leave your network. This matters for the public sector, banks and organizations with strict security rules.
Request · Cybonet

A free 30-day PoC of the gateway.

Tell us what you need: email protection, replacing a legacy SEG, BEC, DLP or public-sector compliance. We will prepare a PoC plan and configuration.