Security Architecture & Defense Shield

1. AES-256-GCM Encryption At Rest

All sensitive SMTP, IMAP, and Google/Microsoft OAuth credentials are cryptographically protected at rest using hardware-accelerated AES-256-GCM. Encryption keys are rotated periodically through isolated Key Management Services (KMS), and no plaintext password data is ever written to application logs.

2. End-to-End TLS 1.3 In Transit

All communication between your browser and MailZentra, as well as outbound socket connections from our Golang daemon to destination ESP gateways (Google MX, Outlook EOP), enforces strict TLS 1.3 with Perfect Forward Secrecy (PFS). Deprecated protocols (SSLv3, TLS 1.0, TLS 1.1) are explicitly rejected.

3. Autonomous OraOps Red/Blue AI Shield

Our infrastructure employs OraOps Autonomous AI running continuous 24/7 security probes:

• Abstract Syntax Tree (AST) Drift Monitoring: Real-time hashing of all running daemon binaries to prevent memory tampering.
• Continuous OWASP Top 10 Auditing: Automated prevention of SQL injection, broken object-level authorization (BOLA), and SSRF attacks.
• Synthetic Socket Probing: Simulated handshake checks run every 5 minutes to verify certificate expiration and relay health.

4. Account Defense & Multi-Factor Protection

To protect customer sender pools from hijacking, destructive operations (such as campaign deletion, domain disconnection, or export of suppression files) require Time-based One-Time Password (TOTP) verification or mandatory secondary email authorization codes.