Zertificon Solutions

What Zertificon Solutions does

Zertificon Solutions GmbH is a Berlin-based, privately held German IT security vendor founded in 2004 that provides centralized email encryption and digital signing solutions for business communication. Its core product, the Z1 SecureMail Gateway, operates as an SMTP proxy that processes company-wide email traffic to apply S/MIME, OpenPGP, and password-based encryption, with proprietary automation layers CertMagic® for certificate lifecycle management and GlobalCrypt® for partner-to-partner end-to-end encryption. The company also operates Z1 Global TrustPoint, an independent certificate search engine launched in 2006, and offers adjacent products Z1 SecureHub for secure large file transfer, Z1 Energy for EDI@Energy-compliant German energy market communication, and Z1 HealthSecure as a healthcare vertical bundle.

The product portfolio is delivered via three commercial models: a self-hosted Server edition with one-time onboarding fees, a SaaS edition (SMGW5) priced at €178–€910 per month across S/M/L tiers sized by user count and email volume, and an Enterprise tier with custom pricing for HSM-integrated and complex deployments. Distribution combines direct enterprise sales, transparent self-serve online purchase, the Azure Marketplace, and a partner network of resellers, technology integrators, and certificate authorities. Customers span regulated DACH enterprises and SMEs across insurance, energy, healthcare, legal, biotech, and public sector verticals, with stated penetration of more than 25% of the top 100 German companies by turnover and approximately 50% of the TOP 100 NIS2/KRITIS companies.

The business is positioned around regulatory compliance (IT Security made in Germany, ISO 27001, GDPR, NIS2, KRITIS, DORA, TISAX, EDI@Energy) and long-tenured customer relationships (multiple enterprise customers exceeding 15 years). No funding rounds, M&A activity, or disclosed revenue figures appear in the source material; the company appears to be an independently held, bootstrapped German Mittelstand vendor.

Name

Zertificon Solutions

Legal name

Zertificon Solutions GmbH

Website

https://zertificon.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

101–250 employees

Short description

Zertificon Solutions is a Berlin-based German IT security vendor, founded in 2004, that provides centralized email encryption and digital signing gateways (Z1 SecureMail Gateway) using S/MIME and OpenPGP, serving regulated DACH enterprises and SMEs across insurance, energy, healthcare, and legal verticals.

Ownership category

akta.pro rank

Product category

Email Encryption and Secure Communication Software

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)

SIC

Telegraph & Other Message Communications (4822)

akta.pro primary industry

Secure Email Gateway (SEG) (HDADAKAA)

Keywords

• Email encryption software
• S/MIME encryption gateway
• Secure file transfer
• NIS2 compliance email
• PKI certificate management

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Z1 SecureMail Gateway SaaS Subscription: Monthly subscription-based pricing for cloud-hosted Z1 SecureMail Gateway 5 (SMGW5) with three tiers (S, M, L) based on user count, domain limits, and email volume. Includes email certificates for licensed users. Base packages from €178/month net (SaaS S) to €910/month (SaaS L). Initial onboarding fees apply (€390-790 one-time).
2. Z1 SecureMail Gateway Server License: Self-hosted server version of Z1 SecureMail Gateway with one-time onboarding fees (€890-1290) and presumably annual support/maintenance fees. Requires customer to operate own infrastructure on VMware, Hyper-V, Citrix, Proxmox, Nutanix, Hetzner, or IONOS.
3. Z1 SecureMail Gateway Enterprise: Custom enterprise licensing for complex requirements including HSM integration and custom integrations. Pricing individually negotiated. Proof of Concept (PoC) with test licenses available for qualifying enterprise projects.
4. Bundled Email Certificates: S/MIME certificates included in subscription packages. Domain-validated certificates with 4096-bit key length based on SwissSign certificates. Certificates can only be used within Z1 SecureMail Gateway and are revoked upon termination.
5. Support and Maintenance Services: Z1 Software Support Standard included with purchase. Optional 24/7 Support available. In-house Zertificon support team provides technical assistance in German and English.
6. Z1 HealthSecure Healthcare Package: Healthcare-specific bundle combining email encryption and secure file transfer capabilities. Includes automated certificate procurement via preset trust center connection and reseller pricing on email certificates.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels8 records

Core offering

Zertificon provides a centralized email encryption and signing gateway (Z1 SecureMail Gateway) that processes company-wide traffic as an SMTP proxy using S/MIME, OpenPGP, and password-based encryption with automated certificate lifecycle management via the proprietary CertMagic® technology. The portfolio also covers secure large file transfer (Z1 SecureHub) and a message broker solution for the German energy market (Z1 Energy) supporting EDI@Energy- and KRITIS-compliant AS4 and API Web Services communication.

Product overview

Zertificon Solutions offers a portfolio of IT security products centered on secure business communication. The core product family includes Z1 SecureMail Gateway (email encryption and signing gateway), Z1 SecureHub (secure file transfer), and Z1 Energy (German energy sector market communication). Z1 SecureMail Gateway 5 is available as cloud-hosted SaaS or self-hosted Server editions and includes integrated features such as CertMagic for automated certificate management, GlobalCrypt for partner email encryption, and integration with Z1 Global TrustPoint for certificate discovery. The product supports S/MIME, OpenPGP, and password-based encryption methods. Z1 HealthSecure provides a specialized healthcare vertical solution. All solutions are developed and operated in Germany with IT Security made in Germany certification.

Differentiator

Problem solved

Functional benefit

Brands

• Z1 SecureMail Gateway: Centralized email signing and encryption solution for businesses supporting S/MIME, OpenPGP, and password-based encryption standards.
• Z1 SecureHub
• Z1 Energy
• CertMagic
• GlobalCrypt
• Z1 Global TrustPoint
• Z1 HealthSecure
• Z1 Appliance
• Z1 SecureMail Companion
• Z1 Customer Portal
• SMGW5

Products and services

• Z1 SecureMail Gateway Centralized email encryption and signing gateway delivered as either cloud-hosted SaaS (SMGW5) or self-hosted Server Edition, supporting S/MIME, OpenPGP, and password-based encryption with a central rule engine, automated certificate lifecycle, and integration for Microsoft 365, Google Workspace, and on-premises mail servers. Designed for organizations from SMEs up to regulated enterprises needing GDPR, NIS2, KRITIS, and DORA-compliant email security.
• Z1 SecureHub Secure large file transfer solution for exchanging sensitive documents and data with business partners, end customers, or automated systems, complementing Z1 SecureMail Gateway. Targeted at organizations that need to send files too large for standard email while maintaining end-to-end encryption and audit trails.
• Z1 Energy Message broker solution for the German energy sector enabling EDI@Energy-compliant market communication via API Web Services, AS4, and S/MIME, with Z1 Cryptographic Module support for HSM integration and a dedicated test environment. Built for utilities, grid operators, balance responsible parties, and energy traders subject to KRITIS.
• Z1 HealthSecure Healthcare vertical bundle combining Z1 SecureMail Gateway email encryption (S/MIME, OpenPGP, password-based) with Z1 SecureHub file transfer, packaged with automated trust center certificate procurement, for GDPR-compliant exchange of patient data, findings, and research results with insurers, authorities, and research partners.
• Z1 Global TrustPoint Independent certificate search engine and publication platform covering 80+ accepted certificate authorities, used by organizations to discover S/MIME and OpenPGP certificates for external contacts and to publish their own certificates for automated exchange. Operates as a standalone web platform with deep integration into Z1 SecureMail Gateway.

Quantifiable outcome

• Up to 80% less effort in certificate handling compared to standard gateways on the market
• +3 more outcomes

Named customers10 records

Segments9 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

AI capability2 records

Feature8 records

Partnerships

15 partnerships are on record, tiered core and minor.

• MicrosoftcoreTechnology or IntegrationZ1 SecureMail Gateway integrates with Microsoft 365 (formerly Office 365) and Azure. Available in Azure Marketplace. Dedicated integration mode for Exchange email server. Works with Microsoft Exchange Online Protection (EoP). Microsoft 365 business packages required for Exchange email server integration.
• GooglecoreTechnology or IntegrationZ1 SecureMail Gateway integrates with Google Workspace (formerly G Suite). Available for business packages with email server. Works with Google Gmail Security features.
• VMwarecoreTechnology or IntegrationZ1 SecureMail Gateway operates on VMware virtualization platform as installable Linux software image (ISO image).
• Microsoft Hyper-VcoreTechnology or IntegrationZ1 SecureMail Gateway operates on Microsoft Hyper-V virtualization platform as installable Linux software image.
• Citrix XenServercoreTechnology or IntegrationZ1 SecureMail Gateway operates on Citrix XenServer virtualization platform as installable Linux software image.
• ProxmoxcoreTechnology or IntegrationZ1 SecureMail Gateway operates on Proxmox virtualization platform as installable Linux software image.
• NutanixcoreTechnology or IntegrationZ1 SecureMail Gateway operates on Nutanix virtualization platform as installable Linux software image.
• HetznercoreTechnology or IntegrationZ1 SecureMail Gateway can be operated on Hetzner cloud/virtual servers. European hoster mentioned as option for self-hosting alongside IONOS.
• IONOScoreTechnology or IntegrationZ1 SecureMail Gateway can be operated on IONOS cloud/virtual servers. European hoster mentioned as option for self-hosting alongside Hetzner.
• SwissSigncoreTechnology or IntegrationCurrent certificate provider for domain-validated S/MIME certificates in Z1 SecureMail Gateway 5. Certificates based on SwissSign with 4096-bit key length.
• Federal Employment Agency (BA) PKIcoreTechnology or IntegrationPublic Key Infrastructure of the Federal Employment Agency issuing S/MIME certificates for encrypted email communication. Over 80 accepted certificate authorities in Z1 Global TrustPoint.
• ISO 27001 Certified Data Center (Germany)coreTechnology or IntegrationSaaS version of Z1 SecureMail Gateway 5 hosted in ISO 27001-certified data center in Germany for GDPR, KRITIS, NIS2, and DORA compliance.
• TeleTrusTminorOthersIndustry association referenced for TeleTrusT guideline on 'State of the Art in IT Security' used to classify encryption technologies (S/MIME, OpenPGP) as state of the art.
• ETSIcoreTechnology or IntegrationCertificate standards compliance with ETSI (European Telecommunications Standards Institute) and CA/Browser Forum standards for S/MIME certificate issuance.
• CA/Browser ForumcoreTechnology or IntegrationCertificate standards compliance with CA/Browser Forum standards alongside ETSI for S/MIME certificate issuance in Z1 SecureMail Gateway 5.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Eperi: Eperi provides a gateway-based email and file encryption solution with a similar focus on compliance and data sovereignty for European enterprises. It is the most direct functional competitor to Z1 SecureMail Gateway.
• SEPPmail: SEPPmail offers a Secure Email Gateway appliance supporting S/MIME, OpenPGP, and identity-based encryption for SMEs and enterprises. It directly competes with Z1 SecureMail Gateway in the DACH market.
• Echoworx: Echoworx provides an enterprise email encryption platform with policy-based encryption and multiple delivery methods. It is a direct functional competitor to Z1 SecureMail Gateway in the email encryption niche.
• Virtru: Virtru offers end-to-end email and file encryption with S/MIME and identity-based encryption. It overlaps with Zertificon's enterprise encryption use cases, particularly in regulated verticals.
• Totemo (Netwrix): Totemo, now part of Netwrix, specializes in email and document encryption for European enterprises. It directly competes with Z1 SecureMail Gateway, particularly in DACH and Switzerland.

Broad incumbents

• Proofpoint: Proofpoint is a leading global email security platform offering secure email gateway, encryption, and advanced threat protection. It competes with Zertificon for enterprise email security spend, particularly for compliance-driven use cases.
• Mimecast: Mimecast delivers email security, archiving, and continuity as a cloud subscription. It is a broader incumbent with overlapping secure messaging capabilities versus Zertificon's gateway-led approach.
• OpenText Voltage: OpenText Voltage delivers enterprise email encryption and secure messaging as part of a broader information management portfolio. It competes with Zertificon for enterprise email encryption deployments.
• Microsoft Purview Message Encryption: Microsoft Purview (Office 365 Message Encryption) provides native email encryption within the Microsoft 365 ecosystem. It is the most strategically significant competitor as Microsoft is both a Zertificon integration partner and an embedded encryption provider.

Emerging players

• Hornetsecurity (Zimbra / VM Horizon): Hornetsecurity provides cloud-based email security, including encryption and compliance features, primarily targeting European SMBs and mid-market. It is an emerging platform competitor in the same DACH/SMB segment Zertificon serves.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/zertificon
• LinkedInlinkedin.com/company/zertificon-solutions-gmbh

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Zertificon Solutions