Protect sensitive patient emails without changing how your team works.
Secure Message is an email security gateway you host. It filters what comes in, and with Professional it holds sensitive outbound messages for a secure portal patients open with a one-time code.
- Patients don't need an accountThey get a link and a 7-digit code in the inbox they already use. (Professional)
- Staff keep their inboxNo new app, no mailbox migration. Type [secure] in the subject to protect a message.
- Your host, your keysThe gateway and its encryption key live on infrastructure you control.
- Simple to runOne Debian host, a clear console, and a free Community edition for inbound filtering.
Prefer to try it yourself? Start with the free Community edition.
Book a 20-minute demo
We'll show the patient experience and how it fits your current email.
Simple to explain. Simple to run.
- Install on a host you control
A Debian 13 server or VM in your network.
- Route mail through it
Point MX at the gateway; mailboxes stay where they are.
- Protect what matters
Inbound filtering for everything; the Professional portal for sensitive outbound messages.
You have received a secure message from Northbrook Family Practice.
Open it in your browser. You won't need an account or a password.
Open secure messageProtected by Secure Message. The content is not included in this email.
Secure message for
j••••@example.org
We'll email a one-time code to this address. Codes expire after 15 minutes.
Send my codeEnter your one-time code
We sent a 7-digit code to j••••@example.org.
Open message5 attempts · resend available after 60 seconds
Hi Jordan, here are the prep notes for Tuesday's visit. Please bring your insurance card and arrive ten minutes early.
visit-prep.pdfClear about what it does and doesn't.
The gateway runs on a Debian host you control. Nothing in the mail path depends on Rubix.
Stored messages are encrypted at rest with a key generated on your host. It never leaves it.
Built to support safeguards like HIPAA's, not a certification. No product guarantees compliance.
Before you ask
Is the secure patient portal free?
No. The portal is part of Professional ($690/year, up to 10 domains, licensed for up to 100 users). The free Community edition covers inbound filtering.
Is Secure Message HIPAA compliant?
No email product can be HIPAA certified, and we don't claim it is. Secure Message is built to support HIPAA safeguards: encryption at rest under your keys, audit logs, access controls and a message path on infrastructure you own. Compliance depends on how you configure and operate it, and on your own policies and agreements.
Do we need to change email providers?
No. Secure Message works in front of the email you already use, including Microsoft 365.
Make patient email feel simple again.
See the portal from the patient's side and the console from yours.
Pricing is public: Community free · Professional $690/year · Enterprise $1,490/year.