59 questions
No points are non-refundable. You just need to spend them on eligible Servertastic products.
Servertastic does not support third-party control panel integrations.
Absolutely. SmarterMail supports mobile sync for email, contacts, and calendars through protocols like ActiveSync, Exchange Web Services (EWS), and CalDAV/CardDAV. So your team can stay connected, even on the go.
Absolutely. Cyber Essentials is designed for small businesses—you don’t need to be tech experts, and we’re here to help guide you through.
Yes! SmarterMail has migration tools for Exchange, Google Workspace, IMAP servers, and more. We can help guide you through the switch without disrupting your business.
Yes just check out our API documentation.
No, you don’t have to renew it every year—SmarterTools licences are perpetual, which means once you’ve bought it, it’s yours to use forever.
However, to keep getting updates and support, you’ll need to renew your Maintenance and Support, which lasts for 12 months.
Renewing Maintenance and Support gives you:
Access to the latest features and improvements
Security patches and performance updates
Technical support from SmarterTools
If you let your Maintenance and Support lapse and want to renew later, SmarterTools charges a reinstatement fee to bring your licence back up to date. This can make it more expensive than just renewing on time each year. Servertastic makes it easy to enable auto-renewals so your maintenance and support never expires.
No—but it makes it a lot easier. Active Protect helps you meet the key technical controls required for Cyber Essentials, and it keeps checking your systems after certification too—so you stay compliant all year round.
If you handle customer data, work with larger organisations, or bid for government contracts, then yes—it’s often essential. Even if not required, it’s a brilliant way to show your customers you’re taking security seriously.
Depositing funds upfront by purchasing Servertastic Points gives access to discounted pricing on eligible products. You do not need to join a reseller programme.
Not much! If you're managing your own server, a bit of IT knowledge helps—but for most users, the webmail interface is simple and modern.
Not at all. The interface is easy to use, and we’re here to help with setup or configuration. If you're managing logs or integrating with other systems, a bit of IT knowledge can help—but it's not required.
Not necessarily. SmarterStats works by analysing server log files, so there’s no need to add code to your pages—though it can also work alongside JavaScript tracking if you want more detail.
No separate reseller application or enrolment is required. Use your existing Servertastic account, or create an account to get started.
A CSR or Certificate Signing Request is required when ordering a HTTPS certificate. You can generate a CSR on your own server. The way to do this will depend on your server software or operating system. We provide some guides here.
You can also use our CSR generator available on the Servertastic Tools website.
Make sure you save the private key when the CSR is generated as nobody else will have a copy of this.
Before the certificate can be issued you must be able confirm you have control of the domain. This is called Domain Control Validation. There are three options available to do this automatically.
During your order you are presented with a predefined list of email addresses. Select one of these email addresses and the system will send an email with an approver link. You must click this link and then “I approve” on the website.
The following addresses are available to choose from:
admin@
administrator@
hostmaster@
root@
webmaster@
postmaster@
This method is recommended as it is usually the easiest and fastest as you do not have to wait for DNS propagation or deal with email system delays.
You will then be given the name of a file and a secret random string. You should upload the file to the location and with the name specified. The file contents should contain nothing but the random string.
Once the order is completed you can delete the file.
You will need to be able to create a TXT or CNAME record for your domain. The details to enter into the TXT/CNAME record will be supplied as part of the order process.
When making changes to your DNS records it can sometimes take a few hours for the DNS changes to propagate even after adding the records.
Log in with your existing Servertastic account, or create an account if you are a new customer. Use the white-label interface to place and manage orders for your customers.
Purchase Servertastic Points by depositing funds into your account upfront and access discounted pricing on eligible products. Points are available independently of white-label ordering.
SmarterMail is often called an “Exchange alternative” because it offers similar features—without the licensing complexity or high cost. Plus, it uses fewer server resources and is easier to manage.
Active Protect when purchased on its own is priced per endpoint. So if each staff member has a laptop and a mobile phone then that would require two endpoints per user. Pricing is availabel per staff member when purchased in conjunction with Cyber Essentials.
Use your Servertastic account to generate orders for your customers and manage them through the white-label interface.
You own the data – it stays on your server
More detailed logs – including bot traffic, server errors, and raw hits
No tracking cookies required – better for privacy and GDPR
Works without JavaScript – so it captures everything, even from users with scripts blocked
The self-assessment is pretty quick if you already have good practices in place—some businesses finish in a day. Cyber Essentials Plus takes a bit longer due to the external testing.
Yes. Active Protect runs quietly in the background and doesn’t access your files or private data. It simply checks your security settings and system status.
Not at all. It’s a simple download and takes just a few minutes to install. Your team can be protected in no time, with minimal input required.
Yes! SmarterMail includes built-in security features like:
SSL/TLS encryption
Two-step authentication
Brute-force attack detection
Domain and user-level anti-spam settings
It’s designed with security in mind, while still being easy to manage.
Yes. Because SmarterStats runs on your server and doesn’t rely on third-party scripts or cookies, it’s much easier to stay compliant with GDPR and other privacy rules.
The CAB Forum has voted to update the maximum certificate lifetimes supported by browsers. This will impact all certificates that require to be trusted in browsers issued by any CA. The main push for these changes has come from Apple.
The advantage of shorter lifespans for certificates is the security improvements. It is likely to lead to the eventual removal of OCSP and much smaller CRLs both checks which can slow down browsers.
The proposed changes to certificate lifetimes are as follows
From today until March 15, 2026, the maximum lifetime for a TLS certificate is 398 days.
As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days. As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days. As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.
Ultimately this will lead to a major push to automate certificate issues. We already offer an API to allow for customers to automate the ordering and delivery of their HTTPS/TLS certificate. Some customers have integrated with the console to complete the automation process.
We are developing in partnership with our providers a process using the ACME protocol and we will be making this available to customers and resellers. The ACME protocol will allow for the complete automation of certificate issuance. This will be provided via a CaaS (Certificate as a Service) subscription.
Updates will be provided on how we will implement the CaaS and the options availabel to resellers.
Any certificates you purchase now will still remain valid and can be reissued until the end of the order expiry date. We will offer long term certificates the opportunity to transition to the CaaS model.
SmarterStats gives you insights like:
How many people are visiting your site
Where they’re coming from
What pages they’re viewing
Which bots are crawling your site
How your SEO is performing
It’s great for improving site performance, fixing issues, and making smarter marketing decisions.
Active Protect supports:
Windows and macOS laptops/desktops
Android and iOS mobile devices
That means your team can stay protected whether they’re in the office or working remotely.
Once installed, Active Protect continuously monitors your devices for security issues like:
Outdated software or missing updates
Weak or reused passwords
Inactive antivirus or firewall
Insecure device settings
It also includes bite-sized training modules to help your team understand cyber threats and how to avoid them—no tech jargon required.
Cyber Essentials helps guard your business against basic but dangerous cyber threats—like phishing, malware, and hackers exploiting out-of-date software or weak passwords. These are the kinds of attacks that most businesses can prevent with a bit of guidance (and that’s exactly what Cyber Essentials gives you).
This means that for the certificate to be issued you must prove control of the domain. This must be done by either receiving an email with a link on the domain, adding a DNS record to the domain or adding a txt file to the website domain. No other checks are performed.
An Extended Validation (EV) certificate is a type of HTTPS/TLS certificate that does more than just secure your website—it also proves your business is real and trustworthy.
With an EV certificate, the Certificate Authority (CA) doesn’t just check that you own the domain—it also verifies your company’s legal name, registration, physical location and the person requesting is a full time employee of the organisation.
You’ll still get the padlock in the browser, just like with a basic certificate, but behind the scenes, users can view your verified business details. It’s a great way to boost trust—especially if you collect personal information, process payments, or work with other businesses.
An Organisation Validated (OV) certificate is a type of HTTPS/TLS certificate that does more than just secure your website—it also proves your business is real and trustworthy.
With an OV certificate, the Certificate Authority (CA) doesn’t just check that you own the domain—it also verifies your company’s legal name, registration, and physical location.
You’ll still get the padlock in the browser, just like with a basic certificate, but behind the scenes, users can view your verified business details. It’s a great way to boost trust—especially if you collect personal information, process payments, or work with other businesses.
SmarterMail comes in different editions depending on your needs—ranging from a free basic edition to full-featured commercial versions with advanced features and support for thousands of users.
Plenty! Even the standard editions come with:
Email, contacts, tasks, and calendars
Webmail access (it works great on mobile too)
Spam filtering and anti-virus/anti-malware tools
Team chat, file storage, and collaboration tools
Support for Exchange ActiveSync, MAPI, IMAP, POP, and SMTP
It works well with email clients like Outlook, Apple Mail, and Thunderbird—and also integrates with mobile devices natively.
You will receive an order link which will allow you to manage your order. You can use this link to configure your order and manage all aspects of your order at anytime.
For HTTPS certificates you will need to supply a CSR which will be used to generate your public certificate. You must also prove control of the domain using either HTTPS, DNS or EMAIL.
Don’t worry! You’ll get feedback and a chance to fix any issues at no extra cost. There are no re-certification fees. The goal is to help you improve, not to catch you out.
A multi-domain certificate (also known as an SAN certificate, short for Subject Alternative Name) lets you secure multiple websites with a single HTTPS/TLS certificate.
Unlike a wildcard certificate (which covers one domain and its subdomains), a multi-domain certificate can cover completely different domain names—like:
yourbusiness.com
yourbusiness.co.uk
yourshop.net
partnersite.org
You don’t need separate certificates for each site—just one to manage and renew.
A wildcard certificate is a special type of HTTPS/TLS certificate that secures your main website and all its subdomains—with just one certificate.
Let’s say your main domain is:
yourbusiness.com
A wildcard certificate would also cover:
www.yourbusiness.com
shop.yourbusiness.com
mail.yourbusiness.com
blog.yourbusiness.com
And any other subdomain you create!
The wildcard part is the asterisk (*) in the domain name—so the cert is issued for *.yourbusiness.com.
Active Protect is a simple but powerful app from CyberSmart that helps keep your business devices safe and secure—all day, every day. It checks your systems for common risks, helps you fix them fast, and includes built-in cybersecurity training modules for your team.
Cyber Essentials is a UK government-backed certification that shows your business takes cybersecurity seriously. It covers five key areas to help protect against the most common online threats. Think of it as a hygiene check for your digital world.
SmarterMail is a powerful, business-grade email server that gives you everything you’d expect from Microsoft Exchange—email, calendars, contacts, and more—but without the big price tag or complexity. It’s perfect for businesses that want professional communication tools without going all-in on Microsoft 365 or Google Workspace.
SmarterStats is a powerful web analytics and SEO tool that helps you understand how people are using your website. Think of it like Google Analytics—but with more control, better privacy, and the option to run it on your own server.
Both versions of SmarterStats give you powerful web analytics and SEO tools—but Enterprise includes extra features designed for teams, larger environments, or managed service providers.
SmarterStats Professional – Ideal for individuals or small teams
Full web analytics for one site or server
SEO tools to help you analyse and improve search engine performance
Real-time and historical traffic reporting
Easy-to-use interface for tracking visitors, bots, referrers, and more
Great for webmasters, marketers, and business owners who want insights into a single site or server
SmarterStats Enterprise – Built for larger businesses and service providers
Everything in Professional, plus:
Multiple site/server support – manage analytics across multiple websites or domains
Remote data collection – analyse stats from multiple remote web servers from a central interface
Multiple users and role-based access – perfect for teams and clients
Report scheduling and sharing – automate report delivery for regular insights
Integration with SmarterMail logs – get even deeper visibility if you're using both tools
When you buy an HTTPS/TLS certificate, it often comes with a warranty—but don’t worry, this isn’t something you need to register or pay extra for. It’s basically a promise from the certificate authority (CA) that if they ever issue a certificate incorrectly and it causes financial loss to your customers, the CA will cover the damages—up to a certain amount.
Think of it like a safety net. You’re not expected to need it, but it’s there to build trust and reassure your customers that your security is backed by more than just good intentions.
The amount of the warranty varies depending on the type of certificate—basic ones might offer $10,000, while high-assurance or EV (Extended Validation) certificates can come with $1,000,000 or more.
You’ll get dozens of built-in reports, including:
Visitor traffic and trends
SEO performance and keyword tracking
Bot traffic and crawler behaviour
Geographic data
Bandwidth and server errors
And much more—all customisable to suit your business.
Cyber Essentials focuses on five key areas:
Firewalls and routers
Secure settings
Access control
Malware protection
Patch management (keeping software up to date)
It’s not about buying expensive tech—it’s about making sure your current setup is configured securely.
Your team gets access to short, easy-to-understand cybersecurity training modules, covering topics like:
Password best practices
Phishing and scams
Device safety
Safe browsing
These are designed to boost awareness and reduce risk—especially useful for small businesses without dedicated IT training.
Both versions of SmarterMail give you a solid, business-grade email server—but Enterprise goes several steps further for organisations that need advanced collaboration tools and Microsoft Exchange-level features.
SmarterMail Professional – Great for small teams or basic business email
Email, calendars, contacts, tasks, and notes
Webmail access with a modern, responsive interface
Standard anti-spam and anti-virus protection
POP, IMAP, SMTP support for desktop and mobile email clients
Basic collaboration features like calendar sharing
Ideal for businesses that want a secure, reliable email platform but don’t need all the bells and whistles
SmarterMail Enterprise – Best for larger teams and Exchange-level functionality
Everything in Professional, plus:
MAPI support – full Outlook integration (just like Exchange)
Exchange Web Services (EWS) – supports Apple Mail, Mac Calendar, etc.
Exchange ActiveSync (EAS) – native syncing for mobile devices
Team Chat – internal instant messaging across your business
Video Meetings – built-in video conferencing and screen sharing
File Storage & Sharing – share documents securely without third-party tools
Domain and user-level archiving, custom reporting, and more enterprise-grade controls
Our documentation system has all the details about our API and includes the ability to try out the API through your browser. API Documentation.
DV certificates are good for situations where all you need is encryption. This could be on test or development environment, API endpoint or server to server communication.
It’s ideal for:
Small businesses with no in-house IT team
Remote and hybrid teams
Anyone working toward or maintaining Cyber Essentials certification
If you want peace of mind without the tech stress, Active Protect is for you.
SmarterMail is ideal for:
Small to mid-sized businesses
Web hosts or IT providers managing email for clients
Anyone who wants full control over their email system
Whether you’re running your own server or using a hosted setup, SmarterMail scales with you.
It’s ideal for:
Website owners who want full control of their analytics
Agencies managing multiple client websites
Businesses focused on privacy or compliance
Anyone frustrated by the limitations of Google Analytics
If you want top-tier website security backed by a global reputation, DigiCert is hard to beat. They’re the go-to choice for some of the world’s biggest brands—and for good reason:
World-class reputation
DigiCert is trusted by banks, governments, and Fortune 500 companies—but they also offer solutions perfect for small businesses that want serious credibility. Choosing DigiCert says, “We don’t cut corners on security.”
Ultra-strong encryption
All DigiCert certificates offer the highest levels of encryption and security protocols—so your customer data stays safe, and your site meets even the strictest compliance standards.
Faster validation
DigiCert is known for lightning-fast issuance times—even for higher-level certificates like EV (Extended Validation) or OV (Organisation Validation). That means less waiting, more securing.
Maximum compatibility
DigiCert certs work flawlessly across every major browser, mobile device, and platform. You’ll never lose trust due to a padlock error or security warning.
Big warranties, big confidence
With warranties up to $2 million, you and your customers are protected in the unlikely event of a certificate authority error. That’s not just a padlock—it’s a promise.
If you’re looking for a trusted, affordable way to secure your website, Sectigo is a great choice. Here’s why thousands of businesses—including small and growing ones—stick with them:
Trusted by browsers worldwide
Sectigo (formerly Comodo) is one of the biggest names in online security. Their certificates are recognised by all major browsers, so your visitors get that reassuring padlock—and no scary warnings.
Options for every business
Whether you’re running a simple blog or a full-blown e-commerce store, Sectigo has a certificate that fits. From basic domain validation (DV) to full business-verified Extended Validation (EV), you can scale as your site grows.
Great value for money
Sectigo keeps things cost-effective, so you don’t need a huge IT budget to get strong encryption and brand protection. It’s high-assurance security without the high-end price tag.
Warranty included
Every Sectigo certificate comes with a warranty (up to $1.75 million depending on the type), giving you extra peace of mind in case anything goes wrong on their end.
Flexible features
Need a wildcard certificate for subdomains? Multi-domain support? Easy integration with your server or hosting platform? Sectigo has you covered.
Helpful support
Sectigo offers dedicated support and resources—and when you buy through us, we’ll help you choose, install, and renew your certificate with zero stress.
We will try and be as invisible as possible. All emails sent by the system do not contain any Servertastic branding and the invite process is white labeled so you can use your own logo and colour schemes. However if the end user contacts the supplier directly it is possible they will reveal that we are the originator of the purchase.