What is our primary use case?
We have it in front of Microsoft 365 for spam filtering.
How has it helped my organization?
SpamTitan's geo-blocking feature is very exciting. On my old server, we spent quite a lot of time building countrywide address blocks. Now, that is completely redundant with the geoblocking. To be fair, it's not just SpamTitan that does it. I see it in lots of places. We do that regularly on firewalls.
But if we're building a new system for people, we'll say, "Do you communicate with any high-risk countries?" If they say, "Yeah, probably. What are the high-risk countries?" we can say, "We have a list of what we considered high-risk, and we can block all of those in one tick." They will say, "Yeah, please, because we get a lot of spam from various countries." That's great. And I presume that it's updated fairly regularly.
When we implemented the geoblocking, it made an immediate and obvious difference to the amount of spam that was being quarantined. It reduced the amount of spam by more than 50 percent.
Doing geoblocking by IP is hard work. It's possible, but the nature of spam is that it's sent out by the spammers using botnets and VPNs to cover their tracks. There's a lot of to-and-fro in the war against spam, but knocking out a whole dodgy country is very good.
Also, when we talk to our customers about cyber security and they mention they have spam and viruses coming in through their email, we can tell them what we can do to help resolve that. We would then look with them at either the time savings or the cost savings, versus the investment they'd have to make in the SpamTitan licensing and say, "When you look at the benefits, they are going to be much greater than the costs. Why would you not do it?"
And once customers have that kind of focus when looking at the issue, they'll make a choice and they'll stick with it. They'll probably have it in place for years because it becomes "a part of the furniture." They take it as a given that they've got protection. They're happy with what it's doing. It's removing swaths of malware and nuisance emails and they're happy that it works.
When looking at our own organization, it used to be the case that people would be looking at their inboxes every day and clearing out junk. They could potentially spend an average of about 15 minutes doing that at the beginning of a day, and perhaps have a few more goes at tidying things up through the day. Before we were using SpamTitan, every person in our company would be losing half an hour or more, every day, just de-junking their inboxes. To take that down, now, to a matter of seconds through a quick scan of the quarantine or a report is really great.
And overall, it has definitely improved our spam catch rate.
What is most valuable?
One of the most valuable features is the opportunity to quarantine things. In addition, the option to have somebody manage the quarantine on behalf of users, or to let the system send out daily reports so that users can manage things on their own, are both very straightforward.
Slightly larger customers in particular have different requirements from those at the very small end. For the larger ones, applying global rules is difficult because, even within one organization, there are many teams, such as sales at one end and accounts at the other end. That means that the types of emails that each team is processing can be very different. If all you have is a solution that looks at every piece of email and applies the same types of rules, you don't get a very smart solution. Whereas, if you can do it per mailbox or per domain, like you can with SpamTitan, that means you are effectively able to configure it almost per-user, which is great.
The user interface is fine. It's fairly quick. Sometimes it's a little bit slow in loading a quarantine list, but it's nothing that's too painful or a problem. The user interface is very workable. In terms of the solution's intuitiveness, it all makes sense.
What needs improvement?
I have noticed that TitanHQ adds new features quite frequently. If I have one little feature request, it would be that they shout a little bit more about the new features they're adding. I haven't blocked them from sending me marketing emails and I wouldn't be averse to having more of them, particularly for the new features. That's really important because it gives us an opportunity to go to customers and prospects and say, "Look, this is our preferred product, and here is what they've just brought out now."
Also, false positives may be an area for improvement. It's very rare that we see false negatives, but false positives might be an area where I, myself, could put some more effort into looking at the settings. There are various settings that could probably be optimized. Perhaps that's something in the user interface that isn't hugely clear. There is a spam score threshold through which you can reject spam when an item has greater score than the setting. I wouldn't call it counterintuitive, but it takes a little bit of thought. Having set it up, it works very well, so I am happy with it.
Finally, a minor point is that I looked at another system that had the ability to deliver to multiple inbound servers, which is something I don't think SpamTitan does, although I haven't followed up by going back to my own installation of SpamTitan to see if could I set that up there. But it's not a big deal. Most people are not going to be doing really complicated things like having multiple inbound mail servers with completely different addresses.
For how long have I used the solution?
We have been using TitanHQ SpamTitan for more than three years. We initially bought a three-year package and that was renewed a few months ago.
What do I think about the stability of the solution?
The stability is fine. I don't think I've ever seen an outage of any sort.
What do I think about the scalability of the solution?
I can't see that there would be an issue when it comes to scalability. If the software is managing millions of transactions a day, it's not going to make very much difference if you go from two million to three million a day. I would imagine it is highly scalable.
How are customer service and support?
We've had very little need to talk to tech support. That says it all. I'm very satisfied with how the support works.
But for partners like us, it's the ease of access to the company that is one of the key differentiators. I'm not sure of the size of TitanHQ in comparison to some of the others, but I'm a great believer in working with SME providers. Quite often, we find that the smaller providers are much more nimble in their relations with their partners and also with their development roots. Some of the huge companies are lumbering, clumsy organizations. While it's not that I'm on a first-name basis with all of the people in TitanHQ, because that's far from the truth, the relationship with them is a lot closer than, say, the relationship with Microsoft, which is a company that it's never easy to get close to.
To be fair and realistic about it, this is just one of the solutions that we have in our portfolio. Potentially, we could put more effort into looking at the marketing resources TitanHQ have. That connects back to what I said before, that I wouldn't object to having a bit more of a push from their side regarding new features and marketing initiatives. That would prompt me to take opportunities actively, as opposed to reactively from customers when they say, "What do we do about spam?"
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We originally went with Microsoft’s built-in spam filtering but decided it was rubbish. We looked around for a better solution and chose SpamTitan.
Microsoft 365 is stable but it's just inadequate. It has typical, crazy Microsoft logic behind it, whereas SpamTitan looks like something that has been developed by people who understand the problem they needed to solve. Its basic technology is very much better than Microsoft's.
How was the initial setup?
SpamTitan was very easy when it came to the setup and configuration and it's easy to use. It would make it an uphill struggle if it was difficult to configure. We do get situations with other products where "difficult to install" can actually be a complete showstopper. That does not apply to SpamTitan. It's very easy to install.
For example, I have a customer that has changed their order processing software three times during the relationship over many years. While the latest one that they have, which looks very slick and modern on the face of it, the installation process is absolutely horrible. Even to do things like configuring multiple users on one PC with this particular software, requires a complete, messy uninstall, registry edits, and then a reinstall for a different user. It will not accept having multiple configurations on one PC.
When I compare that with SpamTitan, which, of course, is not working at the PC level but at the network level, that problem is never going to occur. The ease of installation and use is important. If that long-standing customer came to me and said, "We're thinking of changing again. What are the top-three things to look out for?" I would tell them, "Well, this messy installation that you have on the current one is a showstopper because it takes so much time for our team to configure it, and that costs you money."
The closer it gets to plug-and-play, the better.
With SpamTitan, the deployment was trivial. It was very quick. Going from the starting point, where you've got Outlook on a PC talking to Microsoft 365 with nothing between them, through to having SpamTitan in between the two, took minutes. And that's only done once per organization. The benefits of SpamTitan can be seen as soon as you can measure them. It's not something that takes an awful long time to get up to speed. It just works, straight out-of-the-box.
What's my experience with pricing, setup cost, and licensing?
It's a very good product and the pricing and licensing are exceptionally reasonable. TitanHQ's partner program is fine when it comes to partner profitability.
I do potentially have a question about the pricing policy. It works on the basis of billing per mailbox. I thought, "Oh, that's a bit weird," when I first looked into it. On a Microsoft setup—almost everybody we deal with has Microsoft 365—you can have a lot of aliases. In a very small company that has a dozen users, they'll have a dozen mailboxes, but they may have 50 aliases. The SpamTitan product looks at those aliases as individual mailboxes. At the end of the day, that doesn't really matter, because you can count what is the unit of measurement that you're going to use, whether it is a person, a domain, a mailbox, or everything that could be an email address. I don't mind, it works. It's just, perhaps, a slightly quirky way of doing it.
Also, when I did a couple of renewals recently, the salesperson who was talking to me might not have been quite up to speed with the products and the pricing. It took me a few goes, sending emails forwards and back, to actually get an order placed and to get confirmation of the price that we had negotiated. At the end of the day it worked, so it wasn't a problem.
Which other solutions did I evaluate?
Back in the day, I used to run my own mail servers using Mercury Mail Servers. That was effectively an open-source package which was very straightforward and very manageable. It also had 30 third-party bolt-ons, one of which was a Bayesian spam filtering tool. It would learn on the basis of the training that you gave it, which at the time, I thought, was very clever. These days, there is a lot of spam filtering that is not all that clever. There seem to be quite a few holes in it. But when I did an evaluation of SpamTitan I thought, "Yeah, this is exactly what we want. It has everything." It has filtering, quarantine, blacklisting, and malware protection.
What other advice do I have?
It’s good to be a partner of TitanHQ so that we have something in our portfolio that we can offer to people. However, there's a lot of resistance out there, particularly at the SME end of the market. When we start a discussion about how they do their malware and spam filtering, a lot of people say, "Well, it's all built into Microsoft." We might then get into a discussion along the lines of, “Yeah, it's built into Microsoft, but it's not very good. And it doesn't seem to be getting any better as time goes by, and it's very awkward to use.” Yet, quite often, we run into people who say, "We don't want to pay for an add-on when we think that it can be done with other software packages." This is our challenge when we go to prospects, or to existing customers when we're discussing upselling to them: There is still quite a lot of resistance. It's just one of those things that we have to work to overcome.
My advice would be to come to our office and we'll show it to you in action. We can show you the stats and how easy it is to add things to whitelists and blacklists and to adjust the parameters. We can show you all these cool features it has.
Using geoblocking for allowing exemptions based on a trusted sender's IP domain or email address is okay, although we haven't done much of that yet. I can envisage situations where potentially we could, but there are cases where I have a bit of a dilemma as to whether to block or whether to not block. China is a good example of that. We could do without getting an awful lot of the stuff that we get from China. But equally, one of our biggest customers is a global manufacturing business and they have a presence in China. I can't really say to them, "Hey, why don't you block China?"
We can always take the position of blocking or not blocking on a per-country basis. And then, if we've blocked and shouldn't have, we can just set up some exceptions and probably come up with the right solution. There's work to be done but that's true of a lot of aspects of cyber security. You've got to put effort into it and you've got to keep updating what you're doing with it.
I've yet to find anybody who would come to us simply on the basis that we provide SpamTitan, but it's definitely a very good value-added tool. For in-house use it's almost invaluable because it goes back to the fundamentals of how you do spam filtering and defense.
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor. The reviewer's company has a business relationship with this vendor other than being a customer: Reseller/Partner