Introducing Talon AI 4.0 — our fastest phishing defense yet. See what's new →
Security

Vigilance is in our nature.

A falcon sees a target from two miles away. Talon AI watches every message the same way — so threats are neutralized long before they reach your people.

Defense in depth

Security at every layer of the stack.

Talon AI threat defense

Every inbound message is scored against behavioral, linguistic and reputation signals in under 30 ms. Suspicious mail is quarantined or sandboxed automatically.

Encryption everywhere

TLS 1.3 in transit with enforced MTA-STS and DANE. AES-256 at rest, with per-mailbox keys. Optional zero-knowledge end-to-end encryption.

Modern authentication

Passkeys, FIDO2 hardware keys and authenticator apps. Anomalous sign-ins are challenged automatically and every session can be revoked in one click.

Hardened infrastructure

Single-tenant hardware in Tier III+ data centers across three continents, with real-time replication and encrypted, immutable backups.

Transparent by design

No ad scanning, no data brokering, no hidden analytics. We publish a transparency report twice a year and a warrant canary every month.

Admin-grade controls

Granular roles, enforced policies, audit logs and data-loss-prevention rules give security teams the visibility they need.

How Talon AI works

From the wire to your inbox in four moves.

Every message passes through the same rigorous pipeline, whether it's your first email of the day or your ten-thousandth.

Observe

Connection reputation, sender history and authentication results are checked at the SMTP edge.

Analyze

Language models and link analysis inspect intent, impersonation and urgency cues in context.

Detonate

Attachments and URLs are opened in an isolated sandbox to expose hidden payloads safely.

Decide

Clean mail is delivered instantly. Risky mail is quarantined, with a clear explanation for admins.

Compliance

Independently audited. Continuously monitored.

We maintain the certifications and agreements your legal and procurement teams ask for.

SOC 2 Type IIAnnual audit
ISO/IEC 27001Certified
ISO/IEC 27018Cloud privacy
GDPR & UK GDPRDPA available
HIPAABAA available
EU data residencyFrankfurt · Dublin
Responsible disclosure

Found something? We want to hear about it.

Our security researchers are our best allies. We run a public bug bounty with rewards up to $25,000 and a safe-harbor policy for good-faith research.

Submit a report

$25KMaximum bounty
<24hFirst response
312Researchers rewarded
# https://falconmail.net/.well-known/security.txt
Contact: mailto:security@falconmail.net
Encryption: https://falconmail.net/pgp-key.txt
Policy: https://falconmail.net/security#disclosure
Preferred-Languages: en

Security you can feel good about.

See how Falcon Mail protects your team — and your reputation — every single day.