Create and manage mailboxes
Add a mailbox on any domain you host, set its name and quota, update it later, list what exists and delete what is finished. Standard create, update, list and delete — no ticket, no provisioning wait.
Email hosting
Every domain you host gets real mailboxes, forwarders and autoresponders — free 10GB boxes on every Footprint-Free plan — managed from the same panel as the site, the same API as everything else, and the same AI tool you already use. No separate mail provider to buy, wire up or remember the password for.
A site without an address on its own domain looks like what it is: unfinished. Contact pages that point at a free webmail account, forms that send from somewhere unrelated, privacy notices with no reachable inbox — every one of them is a small tell, and every one of them is avoidable.
Zinn Digital® gives every domain you host real mail: named mailboxes, forwarders that route to wherever you actually read, and autoresponders for the addresses nobody watches. It is provisioned alongside the site, not bolted on afterwards, and it is managed from the same dashboard as your files, DNS, SSL, backups and logs.
On Footprint-Free plans it is free — 10GB boxes for every domain, included in the plan rather than metered as an add-on. That matters most when you run a network: a hundred domains needing a working contact address is a hundred small bills at most providers, and none here.
The full mailbox lifecycle is exposed as first-class platform actions — the same set whether you drive them from the dashboard, the public API or an AI agent.
Add a mailbox on any domain you host, set its name and quota, update it later, list what exists and delete what is finished. Standard create, update, list and delete — no ticket, no provisioning wait.
Point info@, hello@ or abuse@ at an inbox you actually check. Useful when you want a professional address on every domain without a hundred inboxes to monitor.
Set an automatic reply on any address — holiday cover, an acknowledgement for enquiries, or a polite redirect for an address you no longer staff.
Open webmail straight from the dashboard with SSO. No second set of credentials to store, share or lose track of when a team member leaves.
Every mailbox is created with an explicit quota, so a single runaway inbox never becomes everyone else's problem.
Mail records live in the same DNS surface as the rest of the zone — Let's Encrypt SSL, records and mailboxes managed together instead of across three control panels.
Email is part of the Footprint-Free package, not an upsell attached to it. The plan grants it; the platform enforces the grant.
Receiving mail is the easy half. Getting a WordPress contact form, a WooCommerce order confirmation or a password reset to actually land in an inbox is the part that quietly breaks.
Outbound mail from customer sites routes through an SMTP relay via a deliverability provider rather than being fired straight at the internet from a shared host — the approach that keeps a site's sending reputation separate from its neighbours'.
SPF, DKIM and DMARC are managed in the panel, on the same DNS surface as the rest of your records. Authentication records are the difference between a transactional email arriving and being filed as spam, and they are the thing most self-managed setups get wrong or leave half-configured.
Outbound volume is rate-limited per site. That is deliberate: a compromised WordPress install trying to blast spam is the single most common way a host's IP space gets blocklisted, and a per-site ceiling contains the damage to the site that caused it.
Mail reputation is shared infrastructure. We treat spam-sending sites as an operational emergency, with a graduated, audited response rather than a blunt switch.
Every site has a ceiling on what it can send. A compromised install hits the ceiling long before it hits a blocklist, which buys time to fix the cause instead of appealing to a reputation service.
We watch outbound volume spikes, bounce rates, RBL and spam-trap hits and feedback-loop complaints — the signals that show a problem while it is still small.
A spam signal plus an Imunify360 malware finding is high-confidence evidence of the same compromise, which lets us act on the cause rather than the symptom.
Outbound spam is throttled first, then the site moves to restricted — outbound mail off, site still visible — and only escalates to suspended if the sending continues. Every step is audit-logged.
Per-site CageFS isolation and LVE limits are built to contain a compromise to the cage it happens in, so one hacked site is not an open door to the mail of every other site on the server.
Inbound abuse and DMCA reports land in a real intake queue, aggregated and prioritised — so a complaint about your network gets reviewed by a person, not auto-actioned by a script.
Mailboxes are platform objects like sites and DNS records. Anything you can do in the dashboard, you can do in code — or ask an agent to do for you.
Customer mailboxes sit behind a MailDriver adapter, a defined interface with the mailbox, forwarder, autoresponder and webmail-SSO operations declared on it. Today that interface is implemented against 20i, which handles the mail-ops reality of reputation management, IP warmup and abuse desks at scale.
That is a deliberate engineering choice, and the abstraction is the point. Running mail at a million mailboxes is a specialist discipline; we would rather deliver it properly through a proven operator than half-run it ourselves. Because the seam exists, bringing mail in-house later — mailcow or Mailu, region by region — is a business decision, not a re-architecture, and nothing you configure has to change.
The same principle runs through the platform: payments, DNS, registrars, CDN and mail all sit behind swappable adapters. You are never holding a configuration that only one supplier can honour.
Every Footprint-Free plan includes free 10GB email boxes for each domain you host — it is part of the plan entitlement, not a paid add-on. There is no separate mail bill and no per-mailbox charge on those plans. Mailbox provision on other product lines depends on the plan you choose, so check the plan detail at the point of purchase.
Yes. You manage your own DNS records in the panel, MX included, so you can point mail at any provider you prefer while your sites, SSL and backups stay with us. The included mailboxes are there if you want them, not a condition of hosting.
Almost always the cause is a compromised WordPress install. Outbound sending is throttled first; if it continues the site moves to restricted, which turns outbound mail off while leaving the site visible; and it escalates to suspended only if sending persists. You are alerted at each step, the malware scan runs in parallel to find the root cause, and every action is logged. Restricted status lifts on remediation.
The platform is built to contain that rather than hope it never happens. Every site runs in its own CageFS cage with LVE resource limits, outbound sending is capped per site, and mail-log signals are correlated with malware scanning so a compromise is caught while it is small. Containment is the design goal — no host can promise a shared platform is risk-free, so we build to limit the blast radius and act fast.
Not today, and that is deliberate. Customer mail is delivered through our MailDriver adapter, currently implemented against 20i, whose operation handles IP reputation, blocklists and abuse desks at scale. Because mail sits behind a defined interface, moving it in-house later is a supplier decision rather than a rebuild — and it changes nothing about how you manage mailboxes.
Outbound mail from customer sites routes through an SMTP relay with a deliverability provider rather than direct from a shared host, and SPF, DKIM and DMARC are managed in the panel on the same DNS surface as your other records. Correct authentication plus a reputable relay is what makes the difference; we cannot control a recipient's filtering policy, so we give you the records and the routing done properly.
Yes. Our MCP server exposes email actions — mailboxes and forwarders — to any MCP-capable agent, including Claude, Cursor and ChatGPT. The agent is bound to your organisation with OAuth 2.1 and can only do what your RBAC permissions allow, destructive actions require explicit confirmation, and every call is written to the audit log.
Yes. Migrations are free and hands-on, and existing mailboxes are imported alongside your sites, plans and billing history rather than being left for you to rebuild by hand.
Start a card-free 7-day trial — no card, seven days, up to five Footprint-Free sites — with free 10GB mailboxes on every domain, free migrations and a 30-day money-back guarantee behind everything.
Start free