01 · Detects
Adaptive Detection
→ MORE
No static filter. No manual rule tuning.
ICN learns continuously from delivery outcomes, sender behaviour, and network feedback. Drift and anomalies are detected before they cause damage.
Inbound mail
↓
The connection is checked
Before a message is even accepted, we check: where does it come from? How many messages arrive from this address? Was the connection encrypted?
↑
Is the sender really who they claim to be?
We verify that the message genuinely originates from the stated domain. Three independent methods: SPF, DKIM, and DMARC. Missing or forged signatures are detected immediately.
↑
Do we know this sender?
Every sender has a profile. Known senders — especially those replying to a message you sent — are rated as trusted. New senders start neutral.
Known → trusted
New → neutral
↑
What is this message really about?
AI analyses the content and determines whether it is spam, a phishing attempt, a spoofed CEO email (BEC) — or legitimate communication. Attempts to pressure you into a payment transfer are detected automatically.
Phishing · BEC · Malware
Legitimate · Transactional
↑
The decision
All signals are combined into a single score. Depending on the result, the message is delivered, tagged with a warning, or moved to quarantine — never silently discarded.
Deliver
Tagged
Quarantine
↑
Your feedback improves the protection
In the portal you see all quarantined messages. If ICN got it wrong — report it. The system learns from every correction and improves for you and all other customers.
Internet
Outbound mail
↑
Delivered. Secure. Verifiable.
Every outbound message is digitally signed and sealed with ARC. This confirms to recipients worldwide: this message genuinely comes from you.
DKIM signed
ARC sealed
↑
The right path for every message
Normal messages are delivered directly. Bulk sending is throttled to protect your reputation. Suspicious messages are held in the review queue for inspection.
Direkt
Throttled
Review
↑
Does this message behave as expected?
ICN knows the typical communication patterns of your domain. If a message deviates significantly — unusual content, new phrasing, unknown links — it is examined more closely.
↑
Policy & quality checks
Bulk messages are identified and handled collectively. Domains on internal blocklists are stopped. Content that could harm your sender reputation is flagged.
↑
Submission via ICN
Your mail server hands outbound messages to ICN. From that moment on, we take over: signing, checking, routing — fully automatic and requiring no configuration on your part.
↑
Bounces Bounces & Rückmeldungenamp; feedback
Undeliverable messages are handled intelligently. Repeated delivery attempts, auto-forwards, and out-of-office replies are cleanly detected and processed.
Auto-retry
Out-of-office detected