AppRiver and the value of picking up

Someone always picks up the phone. In a business full of threat engines, compliance acronyms and subscription plans, this was the detail Eric Montague chose to mention. Montague ran Executech, a Utah IT provider, and had worked with AppRiver for nearly eight years when he spoke to CRN in 2015. He could buy Microsoft’s software elsewhere. Getting help when a customer needed it was a different purchase.

That distinction explains a good deal about AppRiver. Founded by Michael Murdoch and Joel Smith in 2002, the Gulf Breeze company began with spam and virus filtering. It went on to sell hosted email, Microsoft productivity services and a collection of protections around the inbox. Its useful trick was to give smaller businesses access to complicated technology through people who could make it behave.

Someone always picks up

AppRiver called its support service Phenomenal Care. It is an extravagant name for an ordinary human expectation. Yet ordinary expectations can be surprisingly difficult to meet in software. An IT provider needs an answer it can act on, while its own customer expects an explanation. Every unanswered question travels down that chain.

Montague’s account matters because he was describing a commercial relationship, rather than composing a vendor slogan. Executech used AppRiver’s archiving service for municipal customers. He praised its filtering and, especially, the support available to his business and its customers. The observation suggests a practical explanation for AppRiver’s appeal: an intermediary can earn its place by taking responsibility for the awkward parts.

“Someone always picks up the phone.”

Eric Montague, Executech owner · 2015

The founding ambition was equally practical. Murdoch’s University of West Florida biography describes making enterprise-grade applications accessible to companies of all sizes, starting with anti-spam and antivirus software. A subscription delivered over the internet let a smaller company buy a service instead of assembling the whole operation itself. AppRiver’s later offerings kept returning to that bargain.

The office was vulnerable. The servers were elsewhere.

There is a small Florida detail worth pausing over. According to the local history site Pensapedia, Hurricane Ivan badly damaged AppRiver’s office in 2004. Its servers were in other states, and service continued. The building and the system did not share the same fate.

For a company selling hosted services, that is a useful demonstration of the product’s logic. The customer is buying access to a capability, not to a particular room full of machines. Separating the office from the infrastructure can keep one local disaster from becoming everybody’s outage. It also gives the founders’ location a pleasing irony: a cloud company beside the Gulf had reason to take actual weather seriously.

The lesson is architectural rather than heroic. Put dependencies in different places and a broken building need not break the service. That does not make every hosted system immune to failure. It makes the placement of its failure points a sensible question for a buyer.

The reseller becomes the customer

AppRiver sold directly as well as through partners. During 2014, something changed in the balance: channel revenue rose 30 percent, and indirect sales passed half of total sales for the first time. The network of active partners grew 21 percent. Those figures, reported by CRN in March 2015, describe a company finding a more productive route to market.

The route ran through small IT firms. A managed service provider, or MSP, looks after other organizations’ technology. It already has customers who need email to work and somebody to call when it does not. AppRiver could supply services and expertise behind that relationship, rather than having to establish every customer relationship itself.

AppRiver asked partners what they needed to succeed. The answer included more training and certifications. It offered education through AppRiver University, along with CompTIA course discounts, certifications, lunchtime sessions and webinars. Marketing assistance included co-branded materials and help funding campaigns. Software distribution acquired an unexpectedly school-like character.

Here is something another company can copy: ask what prevents the partner from serving its next customer, then remove a specific obstacle. Training, provisioning and billing all count. The ConnectWise marketplace listing describes AppRiver’s integration updating license counts automatically, sparing partners manual entry. Glamour is scarce in license reconciliation. So is patience for doing it twice.

By November 2018, AppRiver reported 4,500 resellers serving 60,000 companies worldwide. Those are historical company figures. They show the reach of the model without pretending to measure today’s consolidated OpenText business.

Four jobs hiding inside “email”

AppRiver’s portfolio grew around the inbox because the inbox contains several different problems. Filtering deals with unwanted or malicious messages. Encryption protects sensitive information being sent. Archiving preserves communications for later retrieval. Continuity keeps communication available during an outage. Buying one does not automatically accomplish the other three.

Today’s OpenText Core Email Threat Protection describes scanning links when clicked, inspecting attachments in a sandbox and retracting malicious messages already delivered to Microsoft 365 inboxes. Internal mail filtering addresses threats moving between colleagues. These are concrete mechanisms a buyer can ask to see, rather than treating “security” as a single mysterious property.

Core Email Encryption uses data-loss-prevention policies to decide whether an outbound message should be encrypted, quarantined or blocked. Core Email Continuity provides access to 30 days of stored messages through a secure web portal or Outlook during a primary email outage. These descriptions belong to the current OpenText products; they should not be read as a feature list frozen in AppRiver’s founding year.

Microsoft 365 resale and Secure Hosted Exchange supplied the productivity side of the historical business. Support and migration expertise helped customers use the tools. The company’s position was therefore broader than a standalone spam filter: it connected email productivity, protection and the IT firms administering both.

The cost of becoming bigger

Marlin Equity Partners acquired AppRiver in October 2017. Its announcement described plans to strengthen the portfolio and expand geographically. The following year brought Roaring Penguin, a Canadian email-security business, and Total Defense, an endpoint-security provider. The strategy had moved beyond building every new capability internally.

Zix bought AppRiver in February 2019 for an announced $275 million. AppRiver contributed $97.8 million to Zix’s revenue between the acquisition date and year-end. Calling the purchase price “funding raised” would miss the event: ownership changed hands.

The accounts also expose a trade-off. Zix’s gross margin fell from 78 percent in 2018 to 56 percent in 2019. Its annual report attributed the decline to lower-margin AppRiver Office 365 and hosted Exchange revenue. That is a combined-company comparison, not an AppRiver margin calculation. Still, it illustrates what resale can cost: revenue grows without carrying the same economics as proprietary software.

OpenText completed its acquisition of Zix in December 2021. Its stated rationale included a larger MSP distribution network and a deeper relationship with Microsoft. The corporate buyer was purchasing a route to customers as well as security products.

Buy the response, too

AppRiver’s website now directs visitors to OpenText Cybersecurity. The legacy page preserves the Secure Cloud account portal and support links. Today’s wider portfolio includes services assembled through other acquisitions. Treating every OpenText capability as an original AppRiver invention would give the Florida founders an implausibly busy calendar.

For buyers, the appealing fit is a smaller organization, or its IT provider, that wants several email needs handled through a manageable service relationship. Alternatives include Mimecast, Proofpoint and Barracuda, alongside Microsoft’s native security options. Existing licenses, administration skills and deployment requirements should shape the comparison.

The service model earns less if your team can already administer everything efficiently, or if your requirements demand a specialized system outside the bundle. Encryption rules still need sensible configuration. Continuity still needs a rehearsal. A security subscription does not excuse careless access controls or untested recovery plans.

Test the relationship before committing. Ask a real support question, examine a quarantined message, try the administrator workflow and check how license changes reach the bill. AppRiver’s story gives buyers permission to count those mundane details. A beautifully specified product becomes considerably less beautiful when nobody can explain why the invoice or the inbox is wrong.