Solutions for every requirement

Solutions for everyuse case of theConbool Suite.

A full email security suite from Germany with eleven integrated modules. Looking for a concrete solution for email encryption, phishing defense, archiving, Microsoft 365 backup, email continuity or phishing awareness training? Here you will find the right starting point.

One console, one audit log, one contracting party.

Nine solution clusters, eleven integrated modules

Each cluster bundles concrete use cases and references the matching module of the Conbool Suite. All solutions run in the same stack.

Conbool Mail
Conbool Mail

Mailboxes

Business mailboxes on your own domain with webmail, calendar, contacts and ActiveSync. Operated in Germany or in your own data centre.

SecureMail
SecureMail

Email encryption

S/MIME, OpenPGP and a web reader portal for recipients without a certificate. Native Outlook add-ins for Classic, New and Web.

MailGuard
MailGuard

Spam, phishing and BEC

Inbound protection with anti-spam, anti-phishing, BEC and CEO fraud detection, structural and macro analysis of attachments and URL reputation in real time.

Conbool DMARC
Suite

GDPR and compliance

GDPR Art. 32, NIS-2 and BSI C5 cleanly addressed. Audit log, DPA under GDPR Art. 28, EU hosting in Germany, German GmbH as contracting party.

Conbool 365 Backup
Conbool 365 Backup

Back up Microsoft 365

Back up mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID on a schedule and restore individual items. Operated outside Azure, stored in Germany.

Conbool Archive
Archive

Compliant Email Archiving

Tamper-proof archiving of all inbound and outbound email. GoBD-compliant, with full-text search, retention policies and export, in the cloud or on-premise.

SecureFiles
SecureFiles

Secure file transfer

Large attachments and confidential files straight from Outlook. Recipient authentication, audit log, expiry policies, retrieval log, all EU hosted.

Disclaimer
Disclaimer

Signature management

Server-side signatures and mandatory legal disclosures from the directory, per business unit. Consistent across Outlook Classic, New, OWA and Mobile, with no add-in required. The Outlook add-in shows the signature while composing.

View solutions per module

Click through the eleven modules of the suite and see the related solutions directly in the panel.

End to end encrypted email

S/MIME, OpenPGP, domain encryption and a web reader portal. Native add-ins for Outlook Classic, New and Web.

  • S/MIME and OpenPGP native in Outlook
  • Web reader portal for recipients without a certificate
  • Domain encryption configurable per partner
  • Key management in the admin portal, EU hosted

Inbound protection for phishing, BEC and ransomware

Anti-spam, anti-phishing, CEO fraud detection, structural and macro analysis and URL reputation in real time, placed in front of Microsoft 365.

  • BEC and CEO fraud via an authentication layer
  • Structural and macro analysis for Office, PDF, HTML and archives
  • URL reputation and time of click scanning
  • DACH heuristics for spam and greymail

Encrypted file transfer straight from Outlook

Send and receive large attachments and confidential files securely. Recipient authentication, audit log, expiry policies, all EU hosted.

  • Send straight from Outlook via the add-in
  • Secure inbox for external senders
  • Recipient authentication and retrieval log
  • Expiry policies and mandatory receipts

Server-side signatures and legal disclosures

Centrally managed email signatures from Entra ID, Active Directory or LDAP. Consistent across Outlook Classic, New, OWA and Mobile, with no add-in required and an optional Outlook add-in.

  • Server-side processing, no device setup
  • Directory data per business unit
  • Mandatory disclosures legally sound and compliant
  • Consistent across Outlook, OWA and Mobile

DMARC, SPF and DKIM transparently to p=reject

Analyse aggregate and forensic reports, classify sending sources and take the domain to p=reject in stages. DMARC Manager keeps the records correct afterwards.

  • RUA and RUF reports aggregated centrally
  • Subdomain inventory with sender classification
  • Step by step path to p=reject
  • Daily reconciliation of target and actual state after the rollout

Audit-proof email archiving in the mail flow

GoBD compliant archiving with 6, 8 and 10 year retention, cleartext search across encrypted messages and an automated deletion concept.

  • Capture without a connector, Exchange connection via journaling
  • Cleartext archive for S/MIME and PGP messages with full-text search
  • Automated deletion after retention expiry including legal hold
  • Operated in the cloud or on premises

Keep working when Microsoft 365 is down

Every incoming message is stored as it passes the gateway. When Microsoft 365 is down, your team carries on through a separate web interface, with nothing to switch over.

  • No manual step in an emergency, the store runs continuously
  • Browser access, nothing to set up on devices
  • Independent of the mailbox system, on premises Exchange included
  • Automatic delivery once the outage is over

Back up Microsoft 365 and restore exactly what you need

Automated backup on a schedule. Individual messages, files and folders come back on their own, without overwriting whole mailboxes.

  • Exchange Online, online archive, OneDrive and SharePoint
  • Teams channels, Teams chats, Planner and Entra ID
  • Restore individual items from a chosen point in time
  • Operated outside Azure, stored in Germany

Phishing simulation and training with proof

Realistic phishing simulations, short training right afterwards and reports that carry the NIS2 training obligation.

  • Programmes across several months instead of one off campaigns
  • Training on exactly the technique someone reacted to
  • Reports per department and period, exportable for audits
  • Evaluation at group level, never at the individual

Review and clean up permissions in Microsoft 365

A scan records every permission in SharePoint, OneDrive, Teams and groups. Fixed rules assess them, remediation runs with a dry run and a second person.

  • 13 rules from anonymous link to team without owner
  • Score from 0 to 100, report as PDF and CSV
  • Tenant settings against the Conbool Basis baseline
  • File contents are never read

Security settings as a template for every tenant

A template defines the secure state. Every tenant is compared regularly, and the template can be rolled out with a dry run.

  • Conditional Access, sign-in methods, guest permissions, sharing
  • Drift per field and tenant
  • Report-only mode and break-glass accounts before enforcement
  • Separate apps for reading and writing

One suite, eleven integrated modules.

The solutions below all access the same stack: one admin portal, one audit log, one contractual relationship, EU hosting in Germany, German GmbH as data processor.

EU hosting in GermanyISO 27001 certified data centresMulti-tenant capableGDPR Art. 28 DPA

Frequently asked questions about the solutions

Why Conbool and not a point tool per use case.
Conbool is a full email security suite with eleven integrated modules. Anyone looking for a concrete solution gets not just a tool for that single use case, but the full stack: MailGuard, SecureMail, SecureFiles, Disclaimer, DMARC Reports, Archive, continuity, 365 Backup and Awareness in the same console. No separate add-ons, no separate contracts, one audit log.
Can we start with one module and expand later.
Yes. The suite license is billed per mailbox. Modules can be added, onboarding stays identical. The audit log and the admin portal cover all activated modules. You can, for example, start with SecureMail and add SecureFiles and MailGuard later, without new contracts or migration.
How do solution and module differ.
A module is a product component of the suite, for example MailGuard for inbound protection. A solution describes the use case, for example phishing protection or GDPR compliant file transfer. Solutions typically bundle one or more modules with configurations, policies and workflows for the specific need.
Where does the infrastructure run.
In ISO 27001 certified data centers in Germany and the Netherlands. Conbool is a German GmbH and data processor under GDPR Art. 28. The DPA is standardized, the sub-processor list is transparent. No third-country transfer to US hyperscalers without Standard Contractual Clauses and a Transfer Impact Assessment.
How quickly can it be introduced.
MX switch technically in under 30 minutes, parallel operation possible. Outlook add-ins are rolled out to all mailboxes via the Microsoft 365 Admin Center, without setup on the device. A pilot phase in one department usually takes two to four weeks, the rollout across the entire organization afterwards one to two weeks.

Solution found. See the suite in 30 minutes.

Demo in 30 minutes. The whole suite, from MailGuard and SecureMail to Archive, Continuity, 365 Backup and Awareness. EU hosting in Germany.