Skip to main content

Beta Help us improve the Digital Marketplace - send your feedback

RAZOR THORN SECURITY LTD

Email Security (Archiver) - Libraesva

Libraesva Email Security Gateway (ESG) is an Integrated Email Security Solution. We deliver advanced security for email platforms. ESG protects emails using multiple layers of protection, both at the Gateway and API layers. Email threats like phishing attacks, email fraud, and BEC are stopped before reaching their target.

Features

  • Spoofing protection using SPF, DKIM and DMARC.
  • Adaptive Trust Engine powered by AI.
  • Gateway sandbox attachment scanning.
  • Active URL protection detects anomalies at time of click.
  • Threat dashboard enables comprehensive analysis.
  • Remediation removes malicious email.
  • Email continuity when your email platform is unavailable.
  • Advanced email encryption with end to end AES 256.
  • Mail Intercept.
  • API integration to Microsoft 365 and Google Workspace.

Benefits

  • Scan all emails for malware, phishing, BEC, spam and more.
  • Machine learning continuously assesses strength of business to business trust.
  • Gateway sandbox removes dangerous payloads and active content from attachments.
  • Protect users from visiting unsafe sites with active URL analysis.
  • Gain full visibility of email traffic and trends.
  • Remediate attacks simply, with one-click removal.
  • Access the solution via web, Outlook plug in and app.
  • Send secure encrypted emails.
  • Proactively hold suspicious email sends to prevent imposter account takeover.
  • Gain advanced control of your email traffic.

Pricing

£17.13 a licence a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sophia.durham@razorthorn.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

9 6 0 0 2 4 5 7 4 9 3 1 5 2 0

Contact

RAZOR THORN SECURITY LTD Sophia Durham
Telephone: +447470334993
Email: sophia.durham@razorthorn.com

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Hybrid cloud
Service constraints
No.
System requirements
  • Minimum VM size.
  • CPU Core: 1.
  • RAM (base system): 3 GB.
  • Disk Space: 50GB.
  • Supported Hypervisors.
  • VMware ® ESXi 6.0 or higher.
  • Microsoft ® Hyper-V Server 2016+.
  • Proxmox VE 7.4 (KVM) or higher.
  • Citrix XenServer 8.1 or higher.

User support

Email or online ticketing support
Email or online ticketing
Support response times
Standard Support is included Included with every production license, is based on business hours and response times are based on priority:
- Critical Respond within 2 hours, Resolve within 6 hours.
- High Respond within 6 hours, Resolve within 12 hours.
- Medium Respond within 8 hours, Resolve within 1 day.
- Low Respond within 1 day, Resolve within 3 days.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 A
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Standard Support is included Included with every production license, is based on business hours and response times are based on priority. Premium Support at an additional cost includes phone support available 24/7/365 with a dedicated phone number and personal PIN code is available on request.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
There is extensive documentation for installation, configuration and management of the solution.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
All data kept on the ESG is subject to retention periods of 7 days for clean messages and 31 for quarantined email with a full database retention of 60 days (customizable), so there is no need to extract the data from the system.
End-of-contract process
When removing the ESG from an environment removing the MX record on the public DNS will stop all inbound messages from being routed via the ESG, for the outbound disabling the outbound transport rule/connector will stop all outbound messages from routing via the ESG. For example, WelcomeList and BlockList, Audit Log, Relay Configuration, Valid Recipient List and Applicable User List and others can be exported.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
  • Other
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
There is an app for both Android and IOS.
Service interface
Yes
User support accessibility
WCAG 2.1 A
Description of service interface
N/a.
Accessibility standards
WCAG 2.1 A
Accessibility testing
N/a.
API
Yes
What users can and can't do using the API
N/a.
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
White labelling, colours, logo, configuration.

Scaling

Independence of resources
We provide elastic resources.

Analytics

Service usage metrics
Yes
Metrics types
Over 80 System Parametres (CPU, Memory Disk etc).
Reporting types
  • API access
  • Real-time dashboards

Resellers

Supplier type
Reseller (no extras)
Organisation whose services are being resold
Libraesva

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with another standard
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
When removing the ESG from an environment removing the MX record on the public DNS will stop all inbound messages from being routed via the ESG, for the outbound disabling the outbound transport rule/connector will stop all outbound messages from routing via the ESG. For example, WelcomeList and BlockList, Audit Log, Relay Configuration, Valid Recipient List and Applicable User List and others can be exported.
Data export formats
  • CSV
  • Other
Other data export formats
  • XML
  • PDF
  • Log in TXT
Data import formats
  • CSV
  • Other
Other data import formats
EML

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
99.95% for service availability. However we provide a geographical clustered option and the guaranteed availability in that case becomes 99.9975%.
Approach to resilience
Available on request.
Outage reporting
There is a public dashboard showing uptime for datacentre and services and any incident. (status.libraesva.com).

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Granular Role Base Access Control and we provide the ability to defined allowed geographic access areas.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
CERTIFICARSI EOOD
ISO/IEC 27001 accreditation date
05/01/2024
What the ISO/IEC 27001 doesn’t cover
N/A
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • ISO 27017
  • ISO 27018

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO 27018, ISO 27017, ISO 9001.
Information security policies and processes
As per ISO 27001.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
As per ISO 27001.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
As per ISO 27001.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
As per ISO 27001.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
As per ISO 27001.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Covid-19 recovery
  • Equal opportunity

Covid-19 recovery

We play a crucial role in the social value of COVID-19 recovery by focusing on providing Remote Work Solutions. We aim to develop and provide robust cyber security solutions that enable businesses to maintain productivity and collaboration while ensuring the health and safety of employees.

Equal opportunity

To tackle equal opportunities,  we have implemented various strategies and initiatives aimed at promoting diversity, equity, and inclusion (DEI) within the organization and broader community, in particular with a Diverse Hiring Practices and Inclusive Workplace Policies. By implementing these strategies and fostering a culture of diversity, equity, and inclusion, our company has created a more equitable workplace where all employees have equal opportunities to thrive and contribute to the company's success.

Pricing

Price
£17.13 a licence a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
15 days trial license with full functionalities included.
Link to free trial
https://www.libraesva.com/free-trial-email-archiver/

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sophia.durham@razorthorn.com. Tell them what format you need. It will help if you say what assistive technology you use.