Sign In
SecureMail · comparison

NoSpamProxy and Conbool — side by side.

Both vendors cover filtering, encryption, large-file transfer, centralised signatures and DMARC analysis. This page works out where the paths actually diverge: operating model, scope of the suite, and the route to recipients without a certificate. Only publicly verifiable points are compared — as of September 2026.

Request a demoSecureMail in detailUpdated: September 2026

In three sentences

What matters.

NoSpamProxy is an established DACH suite by Net at Work GmbH in Paderborn, Germany, made up of four modules (Protection, Encryption, Large Files and Disclaimer) plus 32Guards, the 32Guards Sandbox, the DMARC analyzer 25Reports and automated certificate management — available on-premise or as a cloud service. Archiving and backup are addressed through a partnership with Dropsuite. Conbool is a Hamburg-based email security suite with nine integrated modules: MailGuard, SecureMail, SecureFiles, Disclaimer, DMARC Reports, Archive, Continuity, 365 Backup and Awareness. Both are German companies with EU hosting, and both can be run either as a cloud service or in your own data centre. The overlap is substantial. The difference is how much of it comes from one place: at Conbool, archiving, Microsoft 365 backup, awareness training and continuity run in the same platform, under one contract and one audit log.

The five most common questions, side by side.

Every statement about NoSpamProxy links to a public source. Every Conbool claim is verifiable in a demo.

How is the architecture set up?

Conbool SecureMail

Conbool comes in two operating modes. As a cloud service, Conbool runs the entire email security in EU data centres on ISO 27001-certified infrastructure, with no server setup, appliance or hardware at the customer site. As an on-premise installation, the same platform runs as a container stack on a Linux host in your own data centre, with updates delivered as a signed update package. In both cases the contract party and data processor is Conbool GmbH in Germany.

NoSpamProxyNoSpamProxy

NoSpamProxy comes in two operating modes: as a classic on-premise installation in your own data centre, and as NoSpamProxy Cloud, run as a service by Net at Work. Both are actively offered; the choice is yours.

Source: nospamproxy.de — product pages and cloud product page, retrieved September 2026.

Why it matters: on-premise gives full control over data and configuration, but requires operation (server, patches, certificates). A cloud service is faster to deploy and documentable without running your own gateway. You have that choice with both vendors, so the operating model is not what separates them. The deciding factor is which disciplines the platform covers.

How is the module structure organised?

Conbool SecureMail

Nine modules in one stack: MailGuard for filtering, anti-spam, anti-malware and BEC protection; SecureMail for encryption via S/MIME and PGP with an integrated message portal as recipient fallback; SecureFiles for large-file transfer; Disclaimer for centralised signatures with Entra ID, AD and LDAP integration; DMARC Reports; Archive for tamper-proof archiving; 365 Backup; Awareness for phishing simulation and training; and Continuity for mail flow when the mailbox system fails. A suite license per mailbox with modules added as needed — one admin portal, one audit log, one contract.

NoSpamProxyNoSpamProxy

NoSpamProxy consists of four modules: Protection (spam, malware and phishing defence), Encryption (S/MIME, PGP), Large Files and Disclaimer (centralised signature management). In addition there are 32Guards and the 32Guards Sandbox for threat analysis, the DMARC analyzer 25Reports and automated certificate management. Email archiving and backup are covered through a partnership with Dropsuite, where archiving sits behind the gateway. Modules can be licensed individually; the suite bundle combines all four at a lower price. In the cloud offering the Protection license is the base, with further modules added as needed. According to the vendor, 25Reports does not require any other module.

Source: nospamproxy.de — product and module overview, cloud product page, the 25Reports product page and the announcement of the Dropsuite partnership, retrieved September 2026.

Why it matters: filtering, encryption, large-file transfer, centralised signatures and DMARC analysis are covered by both vendors, and NoSpamProxy covers archiving and backup through the Dropsuite partnership. The difference is therefore less about whether than about how it is cut: at Conbool every discipline runs in the same platform, with one admin portal, one audit log and one contract, and it adds phishing simulation with training plus continuity for the mail flow when the mailbox system fails, neither of which is listed in the public NoSpamProxy product overview. If you deliberately work with specialised partners, none of that is a drawback.

Which encryption methods are supported?

Conbool SecureMail

TLS (transport encryption), S/MIME and PGP for end-to-end encryption. Additionally an integrated message portal as recipient fallback: recipients without an S/MIME certificate or PGP key receive a secure link to the protected web portal, with no account of their own.

NoSpamProxyNoSpamProxy

NoSpamProxy supports TLS, S/MIME and PGP. For recipients without their own certificate there are several fallbacks: PDF Mail converts the message and attachments into a password-protected PDF, the password is sent to the recipient automatically by SMS, and alternatively the recipient can set their own password in the NoSpamProxy Web Portal.

Source: nospamproxy.de — email encryption feature description, retrieved September 2026.

Why it matters: on the core methods — TLS, S/MIME and PGP — the two solutions do not differ, and both offer a route to recipients without a certificate. What differs is the form of delivery: NoSpamProxy uses a password-protected PDF with the password sent by SMS, complemented by a portal; Conbool uses a message portal the recipient opens through a secure link in the browser. Which suits you better depends on whether your recipients expect a file or a web interface, and whether mobile numbers are maintained for SMS delivery.

How is licensing structured?

Conbool SecureMail

A suite license per mailbox with modules added as needed. MailGuard, SecureMail, SecureFiles, Disclaimer, DMARC Reports, Archive, Continuity, 365 Backup and Awareness run in one platform under one contract. Multi-tenant capable with per-tenant policies for groups and MSPs.

NoSpamProxyNoSpamProxy

NoSpamProxy is billed per mailbox by license tier, combined with the active modules. Modules can be licensed individually; the suite bundle combines all four at a lower price, and in the cloud offering the Protection license is the base. Terms of one month, one year or three years are available. On-premise operation adds server and operating costs, which do not apply in cloud operation. 25Reports is licensed separately by monitored domains and mail volume.

Source: nospamproxy.de — licensing model, cloud product page and the 25Reports product page, retrieved September 2026. Ask the vendor for current pricing tiers.

Why it matters: always run the comparison against the operating mode you will actually choose. Against an on-premise installation, a cloud service saves hardware, patches, TLS rotation and server maintenance. Against NoSpamProxy Cloud that difference falls away, and what counts is scope and price per mailbox.

How much setup and maintenance is required?

Conbool SecureMail

The Outlook add-in is rolled out centrally in both operating modes, configuration runs in the admin portal, and first users can be productive within hours. In cloud operation there is no server maintenance, no patching and no TLS certificate rotation on the customer side. On-premise you install the container stack on a Linux host and apply updates as an update package; the add-in and admin portal stay the same.

NoSpamProxyNoSpamProxy

With the on-premise variant a classic installation and configuration is needed (server, AD integration, mail routing, certificates). With NoSpamProxy Cloud the installation is not required; configuration and maintenance sit with the vendor according to their product page, and updates arrive automatically.

Source: nospamproxy.de / netatwork.de — installation notes and cloud product page, retrieved September 2026.

Why it matters: setup and maintenance effort is a direct cost driver, but it separates the operating modes, not the vendors. On-premise gives full data sovereignty over your own gateway and costs operations; cloud reverses that. Both vendors offer you that choice.

Migration checklist

What to watch for when migrating away from NoSpamProxy.

Replacing NoSpamProxy typically runs in five steps — regardless of whether you operate the on-premise install or the cloud variant.

  1. 1. Document NoSpamProxy configuration and active modules

    Capture the active modules (Protection, Encryption, Large Files, Disclaimer) and additional services (32Guards, 32Guards Sandbox, 25Reports, certificate management) along with the license tier, mail-flow rules, AD integration and routing configuration. This inventory is the basis for the later Conbool configuration and is also useful for compliance documentation.

  2. 2. Export existing S/MIME certificates and PGP keys

    Export all active S/MIME certificates and PGP keys from the NoSpamProxy key store. They are imported into the Conbool tenant so that recipient encryption and internal signatures continue without a break.

  3. 3. Move MX routing to Conbool (parallel operation for the test phase)

    Conbool is first activated for a pilot group (e.g. a subdomain or selected mailboxes). NoSpamProxy stays in production. After a successful test phase, MX routing for the main domain is switched over step by step.

  4. 4. Import domain configuration into Conbool

    Modules (MailGuard, SecureMail, SecureFiles, Disclaimer, DMARC Reports) are activated in the Conbool admin portal. Filter rules, signatures and encryption policies are migrated based on the NoSpamProxy inventory. The Outlook add-in is rolled out centrally.

  5. 5. Decommission NoSpamProxy server or let the cloud tenant expire

    Once all mailboxes are migrated and the audit log is archived, the on-premise server can be deactivated. Cloud variant: terminate the tenant at the end of the contract. Archive retention data per GDPR Art. 30.

These steps apply to current NoSpamProxy versions. For connectors to DMS systems, archiving or specific 32Guards configurations we review the integration in the consult.

Decision aid

When Conbool, when NoSpamProxy.

Conbool SecureMail fits when …

  • You want filtering, encryption, large-file transfer, signatures, DMARC analysis, archiving, Microsoft 365 backup, awareness training and continuity deliberately bundled into one platform with one contract and one audit log.
  • You want to keep the operating model open: start as a cloud service and move on-premise later, without changing vendor or user interface.
  • Your recipients without a certificate would rather read the message through a secure link in the browser than through a password-protected PDF with the password sent by SMS.
  • You need multi-tenant architecture for groups with subsidiaries, or MSP models with separated policies and a single audit trail.

NoSpamProxy fits when …

  • You want to run a Windows Server-based gateway with the familiar NoSpamProxy management console in your own data centre.
  • You prefer the established Net at Work ecosystem and support from Paderborn.
  • You have already invested in NoSpamProxy infrastructure and want to keep using it.
  • Protection, Encryption, Large Files and Disclaimer cover your requirements and you are happy to use the Dropsuite partner offering, or your own specialist, for archiving and backup.

Matched to your setup

Conbool SecureMail by industry and use case.

NIS2-konforme E-Mail-Verschlüsselung

TLS, S/MIME und PGP mit EU-Hosting und Audit-Log für NIS2-Pflichten.

Learn more

Sicheres Nachrichtenportal

Empfänger ohne S/MIME oder PGP-Key lesen Nachrichten im geschützten Web-Portal.

Learn more

E-Mail-Security für Maschinenbau

Verschlüsselter Schriftverkehr mit Lieferanten, Kunden und Partnern im DACH-Mittelstand.

Learn more

NIS2 im Überblick

Richtlinie, Umsetzungsgesetz und BSIG: wer betroffen ist und was gilt.

Learn more

SEPPmail-Alternative

SaaS-SecureMail aus der EU, ohne Appliance-Pflege.

Learn more

NIS-2 E-Mail-Verschlüsselung

S/MIME, PGP und Domain-Verschlüsselung nach NIS-2 angemessen.

Learn more

NIS-2 E-Mail-Sicherheit

NIS-2-konforme E-Mail-Sicherheit mit Audit-Trail.

Learn more

PDF-Verschlüsselung

Sensible PDFs verschlüsselt versenden, ohne Empfänger-Konto.

Learn more

Secure Message Portal

Empfänger-Web-Reader für Schlüssel-lose Empfänger.

Learn more

Verschlüsselung für Thunderbird

Ohne Add-on und ohne Zertifikate auf den Endgeräten.

Learn more

Also compared

Further email-security alternatives and cross-comparisons.

NoSpamProxy is often weighed up against SEPPmail, Hornetsecurity, Mimecast and Cryptshare. Here are the direct comparison pages.

Frequently asked

See Conbool SecureMail in your own setup.

30-minute demo. Cloud service hosted in the EU, from MailGuard through SecureMail to Continuity.

Request a demoSecureMail in detail

Sources and fairness note

Statements about NoSpamProxy rely exclusively on publicly accessible sources: nospamproxy.de and netatwork.de with the related product, module and cloud descriptions, the 25Reports product page and the announcement of the Dropsuite partnership. Claims about internal processes or architecture details not publicly substantiated are avoided. Statements about Conbool rely on our product documentation and contractual commitments. We welcome corrections and act on them; this page was last revised in September 2026 against the vendor's own published information.

As of September 2026. For your final decision we recommend you ask both vendors directly about the points relevant to you and get statements confirmed in writing.

NoSpamProxy, 25Reports and 32Guards are trademarks of Net at Work GmbH, Paderborn. Conbool is a trademark of Conbool GmbH. This page is an editorial comparison — not official NoSpamProxy or Net at Work material.