ztmail ZTmail

S/MIME Certificate & Application, Automated

Automatically give every email a trusted identity and encryption protection.

Trusted identity
Automated email digital signature
Email encryption
Automated email encryption
Automated application
Reducing manual handling of certificates and cryptographic
Download ZTmail AppExplore Service Details and Pricing

Please Choose the Cryptographic Application Automation Service for Email

General Edition

From US$ 0
T1 · Mailbox Identity (MV)
Email Cryptographic Automation Service for Mailbox Identity
Apply for Free

Personal Edition

From US$ 5
T2 · Personal Identity (IV)
Email Cryptographic Automation Service for Personal Identity
Buy Now

Organization Edition

From US$ 8
T3 · Organization Identity (OV)
T4 · Employee Identity (SV)
Email Cryptographic Automation Service for Organization Identity
Buy Now
Coming Soon

What's Still Missing in Email Security?

Email remains essential to business and personal communication, but ordinary email does not, by itself, provide cryptographic assurance of the sender's identity or protect message content from unauthorized access. Three fundamental questions need to be addressed for email security.

Who Sent This Email?

Digital signatures and certificate-based identities help recipients verify the sender's identity and detect changes made to a signed message.

Who Can Read This Email?

S/MIME encryption protects message content so that only the intended recipients with the appropriate private keys can decrypt and read it.

Can S/MIME Work Automatically?

Certificate lifecycle management, digital signatures, encryption, decryption, and identity validation should work together as part of the normal email workflow, rather than requiring users to manage every cryptographic operation manually.

Complete Email Cryptographic Application

Digital Signatures and Identity Validation

Digitally sign outgoing email with a certificate so recipients can verify the signature, check message integrity, and evaluate the signer’s certificate-based identity. ZTmail App integrates signing and signature validation into the email workflow, helping make trusted email communication practical for everyday use.

Email Encryption and Decryption

Encrypt email for intended recipients using their public-key certificates. Recipients can then decrypt protected messages with their corresponding private keys. ZTmail App integrates encryption and decryption into the email workflow, making confidential email communication easier to use.

Certificate Automation

S/MIME security depends on more than obtaining a S/MIME certificate. Certificates must be enrolled, installed, maintained, renewed, and made available to the applications that use them. ZTmail App automates certificate lifecycle operations and connects certificate management with the cryptographic functions that email users need.

Enterprise Email Security Integration

Organizations need cryptographic email protection to work alongside their existing email infrastructure and security controls. ZTmail Gateway adds S/MIME cryptographic processing to enterprise email workflows while allowing existing email systems and security facilities to continue performing their established roles.

S/MIME Automation for Individuals and Small TeamsZTmail App: Make S/MIME Automatic. Make Encryption Default.

ZTmail App brings certificate-based email security into the user's email workflow, helping individuals and small teams use trusted identities, digital signatures, encryption, decryption, and signature validation with less manual effort.

Trusted Identity

Use certificate-based identities to help recipients verify who sent a signed email.

Digital Signature

Sign outgoing email and enable recipient to verify its signature and integrity.

Email Encryption

Protect message content for intended recipients.

Automatic Decryption

Decrypt incoming encrypted email as part of the normal workflow.

Certificate Automation

Reduce the manual work involved in managing certificates.

Flexible Certificate Use

Support the applicable certificate enrollment and import workflows.
ZTmail App is designed to make S/MIME practical without requiring users to become cryptography experts.
Explore ZTmail Gateway

S/MIME Automation for EnterpriseZTmail Gateway: Add Cryptographic Application Without Replacing Your Existing Email Infrastructure.

ZTmail Gateway introduces automated S/MIME processing into enterprise email environments. It works with existing email systems and security infrastructure to apply cryptographic protection at the appropriate point in the email workflow. Existing controls including anti-spam, malware detection, data loss prevention (DLP), and content inspection can continue to perform their established functions, cryptographic processing complements these controls rather than replacing them.

Inbound Email
(1) Receive incoming email
(2) Decrypt and verify applicable cryptographic protections
(3) Pass the message through existing security inspection processes
(4) Deliver the message to its intended destination
Outbound Email
(1) Receive outgoing email from the existing email environment
(2) Apply existing security inspection processes
(3) Sign and/or encrypt the message according to the applicable policy
(4) Send the protected message to its destination
Enterprise deployments can apply trusted identity and cryptographic policies according to organizational requirements.
Explore ZTmail Gateway

Make the Sender's Identity Verifiable

Email addresses alone do not provide the same assurance as certificate-based identities. S/MIME certificates can associate a public key with an identity that has been validated according to the applicable certificate issuance process. ZTmail supports four identity assurance trust levels for different needs, the appropriate trust level depends on the identity assurance required by the communication or business process.

T1 / MV

Mailbox Identity
Establishes a basic identity associated with an email mailbox.

T2 / IV

Individual Identity
Represents a validated individual identity.

T3 / OV

Organization Identity
Represents an identity validated in relation to an organization.

T4 / SV

Organization Employee Identity
Represents an identity validated in relation to an organization.
Identity assurance and cryptographic strength are different. A higher identity assurance trust level does not automatically mean a stronger encryption algorithm. Identity validation helps recipients understand who the sender represents; cryptographic algorithms and key parameters determine other aspects of cryptographic protection.

Works with Your Existing Email Security EnvironmentZTmail is designed to complement existing email infrastructure and security controls.

Existing capability
Role alongside ZTmail
Mail servers and email platforms
Continue to handle normal email delivery and mailbox services
Anti-spam and malware protection
Continue to inspect messages for spam and malicious content
DLP and content inspection
Continue to apply organizational content and data protection policies
+
+
S/MIME cryptographic application automation
Adds digital signatures, encryption, decryption, and signature validation
S/MIME certificate automation management
Supports certificate lifecycle operations and certificate-based identity assurance
The objective is not to replace the existing email environment. It is to integrate cryptographic application automation into it.

Frequently Asked QuestionsLearn more about S/MIME email security, digital signatures, email encryption, trusted identities, and deployment with existing email systems.

Explore Email Security FAQ

Get Started with Email Security

For Individuals and Small Teams

Make certificate-based email security practical in your everyday workflow.

Explore ZTmail App

For Enterprise Organizations

Integrate automated S/MIME protection with existing email infrastructure and security controls.

Explore ZTmail Gateway
ZTmail: Trusted Identity. Encrypted Email. S/MIME Automated.