Each month we share a mix of UI updates, bug fixes, and new features shipped across the Paubox platform. Have a suggestion? Let your account manager know.

Stronger virus detection on inbound email

Paubox upgraded its inbound virus engine to catch more of the macro-based attacks that have been getting past traditional filters. Macros remain one of the most common ways attackers smuggle malware into healthcare organizations, and this round closes several gaps where newer attack patterns were previously slipping through.

  • Detects macro malware hidden inside Microsoft OneNote (.one) attachments.
  • Catches macros wrapped in additional archive and container formats attackers use to evade detection.
  • More accurate detection of Word and Excel macros, including older Excel 4.0 (XLM) macros that could previously be missed.

Overhauled Mail Archive search

The Mail Archive search experience was rebuilt. Previously the page fetched every record on initial load, which made larger archives slow to open. The new search lets you find specific messages quickly, with support for the same field-level filters most admins are used to.

  • No longer fetches all records on initial page load, so the page opens faster regardless of archive size.
  • Search by email address, date range, and free-text terms.
  • Special syntax for targeted searches: from:user@example.com, to:user@example.com, subject:keyword.

Full message headers now visible in Inbound and Outbound Logs

Customers can now click into any message in Inbound or Outbound Logs and see the full email headers. Previously, headers were restricted for messages that had been quarantined as Spam, Phish, or Virus. Headers are useful for troubleshooting delivery issues without opening a support ticket. Admins can verify SPF, DKIM, and DMARC results, check routing, and identify the source of delays directly from the log.

  • All headers visible across Inbound and Outbound Logs for messages sent on or after April 17, 2026.
  • Available on every customer account with logs access.

Cleaner, faster Partner Dashboard

The Partner Dashboard got two rounds of improvements this month: a clearer top-down view of clients, and an easier order flow when adding products or seats.

  • Summary tiles at the top of the page show total clients, total seats across all clients, and the annual/monthly/mixed breakdown.
  • New term filter narrows the client list to monthly, annual, or mixed plans.
  • Term and seats columns added to the client table.
  • Pricing column now shows the annualized total per client, labeled "per year".
  • New Partner Pricing page in left nav shows partner pricing matrices.
  • Freeform numerical input for sender count when adding a product to a client.
  • Order summary shows the current and new pricing tier that will result from adding the specified number of senders, factoring in existing sender counts across all of the partner's clients.
  • Help center text and links updated throughout.

Additional updates by product

ExecProtect+

  • ExecProtect+ no longer auto-creates Display Name Spoofing profiles for senders with single-word display names like "Mortgage" or "marketing", which had been triggering false positives on legitimate automated mail from some government senders.

Inbound email security

  • Improved spam classification in quarantine. Some messages that were previously labeled as Phish or Virus are now correctly classified as Spam, giving admins reviewing flagged mail more accurate categories.

Account administration

  • Marketing Access is now a permission, separate from the user role. The "Paubox Marketing" role has been removed from the role dropdown, and each user has one role at a time plus any granted permissions.
  • Last Login column added to the Users table, sortable, displayed in the viewer's local timezone.
  • Domain dropdowns now sort alphabetically across the app, with "All Domains" first. Affects Outbound Security (Statistics, Quarantine, Action History, Mail Logs, Senders), Inbound Security (Statistics, Quarantine, Action History, Mail Logs, Rulesets), Inbound Settings, Admin Unique Senders, DKIM Settings, and Secure Form Settings.

Email API

  • Fixed a class of 500 errors caused by attempting writes against a read-only database replica. Better logging added for diagnosing remaining 500-error reports.

Bug fixes

  • Users page now shows 50 users per page.
  • Removed the spam-classification bypass for inbound attachments larger than 1 MB, so those messages are now scanned consistently.
  • Fixed authentication so partners can view Paubox Marketing pages on behalf of their clients.
  • Cursor now auto-focuses on the Email field on the signup page.
  • Dark Mode fixes for Email API pages: Add/Edit Webhooks modal, Mail Log preview modal.
  • Dark Mode fixes for Marketing Settings text, All Stats axis labels, and the Forms Builder UI.