Introduction¶

Welcome to Smailander! This guide will help you understand what Smailander is, why you might need it, and how it can help protect your organization from email-based threats.

What is Email Security?¶

Email remains one of the most common attack vectors for cybercriminals. According to recent statistics:

• 91% of all cyber attacks begin with a phishing email
• $17,700 average cost per data breach caused by phishing
• 3.4 billion phishing emails sent daily worldwide

Email security solutions need to be proactive, not just reactive. This is where honeypots come in.

What is an Email Honeypot?¶

An email honeypot is a decoy email address designed to attract and detect malicious emails. Think of it as a trap set up to catch attackers before they reach your real email addresses.

How Email Honeypots Work¶

sequenceDiagram
    participant Attacker as Malicious Sender
    participant Honeypot as Honeypot Email
    participant System as Smailander
    participant Alert as Alert System

    Attacker->>Honeypot: Sends phishing email
    Honeypot->>System: Forwards to Smailander
    System->>System: Analyzes email
    System->>System: Detects threats (ClamAV, SpamScanner)
    System->>Alert: Triggers webhook
    Alert->>Alert: Notifies security team
    System->>System: Logs for analysis

Why Use Smailander?¶

1. Detect Data Breaches Early¶

When you sign up for a service, use a unique honeypot email address. If you ever receive spam at that address, you know exactly which company leaked your data.

2. Real-Time Threat Detection¶

Smailander monitors all incoming emails to honeypot addresses and: - Detects phishing attempts using advanced algorithms - Identifies spam campaigns and patterns - Scans for malware using ClamAV - Tracks malicious senders and domains

3. Build Threat Intelligence¶

Over time, Smailander builds a comprehensive database of: - Malicious email addresses and domains - Phishing patterns and techniques - Known spam sources - Attack campaign correlations

This intelligence can be shared across your organization and with the security community.

4. Train Your Team¶

Use captured phishing emails to: - Train employees to recognize real threats - Test security awareness - Create realistic phishing simulations - Improve incident response procedures

Who Should Use Smailander?¶

For Individuals¶

• Privacy advocates who want to track data breaches
• Security researchers studying email threats
• Tech enthusiasts building personal security systems

For Small Businesses¶

• Startups needing affordable email security
• Consultants protecting client communications
• E-commerce businesses monitoring customer data leaks

For Enterprises¶

• Security teams managing threat intelligence
• Compliance officers ensuring GDPR/HIPAA compliance
• SOC teams monitoring for advanced persistent threats
• DevOps teams integrating with existing security stacks

Key Concepts¶

Before diving in, it's important to understand these core concepts:

Honeypot Email Addresses¶

These are fake email addresses you create and use when signing up for services. They have three main purposes:

1. Monitoring: Track emails received at specific addresses
2. Testing: Test spam filters and detection systems
3. Leak Detection: Identify which services leaked your email

Email Forwarding¶

Smailander works by forwarding emails from honeypot addresses to your Smailander account. This is typically done through:

• Forward Email API: Simple REST API for forwarding
• SMTP Forwarding: Direct email server configuration
• Cloud Integration: G Suite, Office 365, etc.

Threat Analysis¶

Each email received is analyzed for:

Webhook Notifications¶

Smailander sends real-time notifications to your systems via webhooks when:

• New emails arrive
• Threats are detected
• Pattern anomalies occur
• System events happen

Next Steps¶

Now that you understand the basics, continue to:

1. Quick Start - Get Smailander running in 5 minutes
2. Installation - Detailed setup instructions
3. Core Concepts - Deep dive into technical details
4. User Guide - Learn to use the platform

Need Help?¶

• Check our FAQ for common questions
• Visit our Troubleshooting guide
• Contact us for support

Ready to start? Jump to the Quick Start guide!