WenMail

WenMail is a multi-tenant email hosting service for businesses that need private, branded email on their own domain. Each client gets dedicated mailboxes, a self-service web portal, and full control over their domain's mail flow.

Capabilities: mailbox provisioning with quotas, custom domains with guided DNS setup (MX/SPF/DKIM/DMARC), per-domain DKIM signing, anti-spam scanning (Rspamd), webmail UI, IMAP/SMTP for desktop and mobile clients, mail import from other providers (mbox/CSV), aliases and forwarding, auto-responders, catch-all rules, app passwords for legacy clients, two-factor authentication.

Security: TLS 1.2/1.3 enforced on all connections, DKIM keys encrypted with AES-256-GCM at rest, mailbox passwords hashed with SHA512-CRYPT, portal accounts with Argon2. All API endpoints validate input via Zod schemas and use parameterized SQL via Drizzle ORM. Outbound rate limits (per-mailbox and per-client), fail2ban for brute-force protection, origin-isolated admin console for XSS containment.

Compliance: GDPR-aligned, with a published Privacy Policy, DPA, and security.txt for responsible disclosure. Customers retain full domain portability and can export their data at any time via IMAP, CSV, or Maildir archive. Service is operated from a dedicated VPS in India.