Security

MailZera uses signed inbound requests, replay protection, short timestamp windows, encrypted secrets and message headers, CSRF protection, secure sessions, rate limits, audit logs, HTML sanitization, and automatic retention cleanup.

Report a vulnerability privately to security@mailzera.com. Do not include passwords, Worker secrets, or unnecessary personal data.

Last updated: 09 Nov 2026 · Contact: postmaster@mailzera.com