Definition
A secure email gateway (SEG) is a service that receives a company's inbound mail first, scans it, and only then passes it on to the real mailboxes. The company's MX records point at the gateway rather than at Microsoft 365, Google Workspace or its own server. Well-known gateway products include Proofpoint and Mimecast, among others.
The gateway checks for spam, phishing, malware and policy violations. It may quarantine messages, rewrite links, add warning banners or reject mail outright.
Why it matters
Gateways change what a mail server will tell an outsider. The gateway is the server you talk to during the SMTP conversation, and it may not know, or may not reveal, whether a particular mailbox exists. Common behaviours include:
- Accepting every recipient and sorting it out later, which looks like a catch-all domain.
- Rejecting or slowing connections that look like address probing.
- Applying greylisting or rate limits to unfamiliar senders.
For verification, this means more uncertain results at companies behind gateways, which are often larger, more security-conscious organisations. For sending, it means your mail faces an extra layer of filtering, so authentication and reputation matter even more.
You can often spot a gateway by looking up the domain's MX records. The hostnames usually name the vendor.
How SimpleCold handles it
SimpleCold reports what the server actually does. If a gateway accepts every address, the catch-all probe catches it and the result is Risky with accept_all. If verification is blocked by anti-spam technology, the result is Risky with blocked_by_server and the reason "The mail server blocked the check." If the server will not confirm the address at all, it is Risky with no_response. None of these are passed off as Deliverable.
Check a domain's mail servers with the free MX lookup.