Dry Dock
Held mail waits here for review. Release it, or let it expire — every decision is logged and reversible.
Inbound channel · open sea · 51.89°N 5.31°W
Breakwater is the email security gateway that meets every inbound message at the waterline — reads it for intent and forgery, disarms what it carries, and decides whether it makes port. Built for the teams who guard many harbors at once.
The passage
Nothing is delivered on trust. From the moment a message reaches the edge, it sails a fixed passage — one authority weighs the evidence, and only then does it make port.
The SMTP edge takes the message and spools it durably to object storage before a database row ever exists.
bw-receiverRspamd, ClamAV, and full SPF / DKIM / DMARC parsing read the message for spam, malware, and forgery.
ScanWorkerAttachments are detached and rebuilt inside a sandbox, stripped of macros and active content.
Detach → ConvertA single authority weighs every signal and rules once: deliver, send to dry dock, or turn away.
VerdictWorkerClean mail is ARC-sealed with the tenant’s own signing key, held in per-tenant custody.
SealingWorkerThe message makes port — handed to your mail host, with its queue-id recorded on the trail.
DeliveryWorkerHarbor operations
The console speaks the language of the harbor, because that is what it is — a working view of everything moving through, held back, or bearing down on your mail.
Held mail waits here for review. Release it, or let it expire — every decision is logged and reversible.
Coordinated attacks surfaced as they form — the same phishing wave hitting many tenants, seen as one front.
Follow any message’s full passage — accept, every check, the verdict, and where it finally landed.
One place owns the ruling. Rules render to an auditable snapshot, so you can always answer “why.”
Senders, domains, and URLs weighed against live intelligence — the depth reading behind every score.
The harbormaster’s standing orders — who always sails through, and who is never let past the wall.
Built for the fleet
Breakwater is multi-tenant to the core. Every client keeps its own domains, signing keys, policies, and quarantine — isolated by row-level security — while your staff works the whole fleet from a single console. Onboard a tenant with a guided wizard that saves the MX cutover for last, so nothing moves until everything’s ready.
The watch never stands down
A message counts as accepted the moment it is durably spooled — the blob, not the database row, is the source of truth. If a failover drops the tail of the replication stream, the spool sweep reconstructs every message that reached the wall without a trace. Nothing that made the breakwater is ever lost behind it.
Make port
Onboarding is a guided passage. Breakwater verifies the domain, provisions its signing keys, and sets the routing — then saves the MX cutover for last, so nothing moves until you’re ready.