CodeTwo builds the email plumbing that keeps Microsoft 365 and Exchange environments compliant and operational. Since 2007, the company has shipped software for centralized email signature management, mailbox migration, and email backup - tools that sit directly in the data path between senders and recipients, handling sensitive corporate communications at scale. Over 130,000 companies in 150+ countries run their products.
From a security perspective, the threat surface is clear: email signature management means injecting content into every outbound message across an organization; migration tools handle bulk access to entire mailbox stores; backup solutions touch the full archive. The attack surface isn't theoretical - it's the product itself, and any compromise has blast radius across thousands of tenants simultaneously.
The team is over 120 people, headquartered in Poland, operating with a direct internal culture that the company traces back to its early days. Their technical stack centers on deep Microsoft 365 integration, which means the security team works against Microsoft's own API contracts, OAuth scopes, and tenant-level permission models. If you're looking to work on software where the data you're protecting is the communication layer itself, the stakes are concrete.
