ZoTrus Email Security Solution

One software for web browsing, email sending/encrypting/signing

One software for web browsing, email sending/receiving/encrypting/signing

Zero trust for plaintext emails, only trust digitally signed and encrypted emails, and always verify signature

Free automatic configuration of dual-algorithm email certificate (SM2/RSA), adaptive cryptography algorithm

ZT Browser integrates with email client to seamlessly automate email encryption and digital signature

Automatically exchange public keys, automatically timestamp, and comply with S/MIME standards

Completely free, encrypted email is compatible with Outlook, Thunderbird, Apple Mail, Huawei Mail, etc.

Learn more

Choose the Right Email Security Service

Free Edition
Auto-configure free email certificate

$0.00
/ Year / Mailbox

1-year RSA MV free email certificate

1-year SM2 MV free email certificate

ZT Browser encrypt/decrypt emails

Basic Edition
Auto-configure MV email certificate

$12.99
/ Year / Mailbox

1-year RSA MV email certificate

1-year SM2 MV email certificate

ZT Browser encrypt/decrypt emails

Personal Edition
Auto-configure MV+IV email certificate

$29.99
/ Year / Mailbox

1-year RSA MV email certificate

1-year SM2 IV email certificate

ZT Browser encrypt/decrypt emails

Enterprise Edition
Auto-configure MV+OV/SV email certificate

$129.99
/ Year / 5 Mailbox

1-year RSA MV email certificate

1-year SM2 OV/SV email certificate

ZT Browser encrypt/decrypt emails

ZT Browser is also a free encrypted email client software

ZT Browser a free encrypted email client software

ZT Browser has a built-in email client, which is used to send and receive encrypted emails.

Automatically configure dual-algorithm dual-email certificates for users for free, adaptive encryption algorithms, and user can set the priority use of algorithm to achieve end-to-end email encryption, global trust and cryptography compliance.

Use ZT Browser to automatically send encrypted emails and decrypt encrypted emails, completely free.

Zero trust the plaintext email, use ZT browser to log in to the mailbox, automatically encrypt each email, and save the ciphertext email in the cloud mail server to ensure the security of the whole life cycle of email contents.

Learn more

Use ZT Browser to send encrypted emails

Use ZT Browser to login to the mailbox for the first time, it automatically configures the email certificate for free.

Use ZT Browser to login to the mailbox, click the "Compose" icon in the address bar, you can send encrypted emails.

ZT Browser automatically get the recipient's public key certificate from ZoTrus Public Key Exchange System, and users do not need to exchange public key in advance.

ZT Browser automatically decrypts the received encrypted email with the user certificate and displays the email encrypted icon.

Compatible with Windows Outlook and other email clients, Outlook can also decrypt encrypted emails encrypted by ZT Browser.

Just download and use ZT Browser to achieve automated email end-to-end encryption, no need to apply, install and manage email certificates from CA.

Use ZT Browser to send digitally signed emails

Use ZT Browser to login to the mailbox, click the "Compose" icon in the address bar, you can send a digitally signed email to ensure that the sender's identity is trusted, and the email will not be illegally tampered with.

ZT Browser automatically configures the email signing certificate for free, and automatically signs a timestamp signature for each signed email to prove that the email sending time is trusted.

Use ZT Browser to view digitally signed emails, automatically display the identity information and digital signature icon of email senders, to prevent impersonation email fraud.

Compatible with Windows Outlook, it can also parse digitally signed emails and display the email signature icon.

Just download and use ZT Browser, you can automatically realize email digital signature, no need to apply, install and manage email certificates from CA.

All emails are timestamped

ZT Browser automatically attaches a timestamp signature when sending digitally signed emails, so that each sent email has an timestamp to ensure that the email sending time is trusted.

ZT Browser correctly parse the sending time of the timestamp-signed email and display the trusted email sending time.

RSA algorithm email digital signatures are signed with RSA algorithm timestamps, and SM2 algorithm email digital signatures are signed with SM2 algorithm timestamps.

ZT Browser has a built-in timestamping service, which automatically provides timestamp signature service for each email sent, and the signing time comes from multiple trusted and reliable network time sources. On-premise timestamping services are faster, more reliable, and more privacy-friendly than cloud services.

Follow RFC3161 standards and GM/T 0033-2014 China commercial cryptography standard.

Ideal for all Internet applications that need to prove when an email was sent.

Learn more

Automatic email certificate management (AECM)

ZT Browser is the world's exclusive leader in the innovative solution for automatic email certificate management, so that email certificates can also be automatically applied and deployed like SSL/TLS certificate of Automatic Certificate Management Environment (ACME).

ZT Browser automatically connects to ZoTrus Cloud Cryptographic Service System, automatically completes email control validation, and automatically configures dual algorithm (RSA/SM2) email certificates.

ZoTrus Cloud Cryptographic Service System does not host the user's email certificate private key, ZT Browser generates the private key and CSR file on the user's computer, only submits the CSR file to the Cloud to automatically apply for the email certificate, encrypts and saves the private key in local computer and automatically installs the email certificate to the Windows certificate store for Outlook and other APPs.

After the email certificate is issued, it will be encrypted and sent to the user's own mailbox for saving (.pfx/p12), so that the used email certificate can be automatically obtained when ZT Browser is reinstalled and the new ZT Browser is installed on other devices, which can be used to decrypt the encrypted email and no need to re-apply for a new certificate.

The integration of the Client (ZT Browser) and the Cloud (ZoTrus Cloud Cryptographic Infrastructure) completely solves the problem of the century that email encryption must manually apply for an email certificate from the CA in advance, so that email encryption can truly achieve popular application.

Learn more

Automatic exchange of public keys

When the user uses ZT Browser to send encrypted emails, if there is no recipient public key certificate locally, it will automatically connect to the ZoTrus Public Key Exchange System (PKX) to obtain the recipient's public key certificate. The email sender and receiver can directly send encrypted emails without exchanging public keys in advance, which is more worry-free and convenient.

When ZT Browser Email Client receives any user's signed email, it will synchronize its public key certificate to the cloud ZoTrus PKES, so that other users can obtain the user's public key certificate automatically.

If ZT Browser cannot obtain the recipient's public key certificate from the Cloud PKES, it will automatically generate a pair of keys for the recipient, and temporarily encrypt and store them in the cloud PKES database, the sender can use this public key to send encrypted emails to the recipient, and the recipient will receive an encrypted email and a plaintext email automatically sent by the system on how to decrypt the encrypted email, download and install ZT Browser, and use ZT Browser to log into the mailbox to automatically obtain the decryption key and email certificate, then the cloud database automatically deletes the temporarily saved keys (only stored for 7 days).

The integration of the Client (ZT Browser) and the Cloud (ZoTrus Cloud Cryptographic Infrastructure) completely solves the century problem that email encryption must exchange public keys in advance, so that email encryption can truly achieve popular application.

Learn more

The Client and the Cloud integration to realize the automatic exchange of public keys

Manage keys automatically, manage keys autonomously

Use ZT Browser to achieve email end-to-end encryption, use the user's mailbox to save its own encryption key by default, and automatically implement key management (key generation, backup, import and export).

All keys can not only be used in ZT Browser, but also automatically imported into the Windows Certificate Store, which is convenient for Outlook.

All keys can be exported and managed by one-click independently, and imported to other email clients for use.

Autonomous and automatic management of keys, easy to use email encryption service. One-click export and management of keys, flexible self-management and use of keys.

Learn more

EKM, Centralized management of encryption keys

Use ZT Browser to achieve email end-to-end encryption, and it use the user's mailbox to save its own encryption key by default. For large enterprise customers, it needs to centrally manage employee’s keys, then ZoTrus Enterprise Key Management System (EKM) is the right choice.

Local intranet deployment, local centralized management of private keys, employees connect to the Enterprise KM System to obtain encryption keys and CSR, then automatically apply for email certificates from ZoTrus Cloud Cryptography Service.

ZoTrus Enterprise KM System supports RSA and SM2 algorithm key generation and management, and it is better to deploy dual KM to achieve hot standby to ensure that employees can obtain encryption keys at any time.

di, on-premises deployment, centralized management of encryption keys

Email Encryption Automation Gateway

Users still use the usual email client to send and receive emails, and only need to change the IMAP/SMTP server to the gateway URL to send and receive encrypted emails.

The Gateway automatically connects to the ZoTrus Cloud Cryptography Service, automatically configures the dual-algorithm email certificate of global trust and cryptography compliance, automatically obtains the recipient's public key certificate, automatically realizes email encryption and digital signature, and stores the email content in the mail server in ciphertext.

The Gateway is integrated with the Enterprise KM System, and the private key is stored in the local gateway.

Users do not need to care about the application and use of email certificates, do not need to exchange public keys in advance, do not need to change email client software, and support all email client software.

If users like to use Webmail encryption, then need to download and use ZT Browser, ZT Browser will be connected to the Email Gateway to achieve automatic email encryption and decryption.

Users can choose the default cryptographic algorithm (RSA/SM2), adaptive encryption algorithm for email encryption, to meet the application needs of global trust and cryptography compliance.

Compatible all other S/MIME email client

Users only need to install ZT Browser, not only can use ZT Browser to log into the mailbox to send encrypted emails and decrypt encrypted emails, but also can use commonly used email clients such as Outlook to automatically send encrypted emails and decrypt encrypted emails.

Users use ZT Browser's email encryption service, the email certificate will be automatically installed into the Windows certificate store, not only ZT Browser uses this email certificate to achieve email encryption and decryption, but other email clients such as Outlook can also use this certificate to achieve email encryption and decryption for free.

Users can also export the automatically configured email certificate to other email clients for use, the email certificate automatically configured by the free service edition is trusted by ZT Browser only, and the email certificate automatically configured by the paid service edition is trusted by other common email clients (such as Outlook, Thunderbird, Apple Mail, Huawei Mail, etc.).

Compatible with all other email client that supports S/MIME standard

Email security requires automation for email encryption and digital signature
Email security, what you need is an email encryption automation, not an email certificate, ZoTrus provides the cryptography service you really need.

Comparison of the method	ZT Browser	ZoTrus Email Gateway	Other Email Client	TLS Email Encryption
S/MIME certificate encryption				NO
Auto-configure email certificate			No, apply and configure manually	NO
Email transmission always encrypted				Yes, both sides must support TLS
End-to-end email encryption				NO
Ciphertext stored on the mail server				NO
Digital signature proves trusted identity				NO
Timestamp certifies the email sent time				NO
Key management	In device and mailbox	In Gateway, central management	NO	NO
Need to replace the email client	No, but need to use ZT Browser	NO		NO
Need to purchase the email gateway	No		No	No
Support SM2 algorithm			No	Yes, if using SM2 SSL certificate
Applicable scenarios	All	Key central management	End-to-end encryption	Minimum requirements

ZoTrus Email Security Solution

One software for web browsing, email sending/encrypting/signing

Choose the Right Email Security Service