Your email.
Only you.

Stop email impersonation. Protect your domain with automated email authentication.

Free check · No signup required

This page adapts to your role

Now showing: CISO / Security Leader · Risk, governance and assurance

For security leaders

What your board and auditors ask for

Quantified exposure

One posture score, defensible

A live 0-100 email-risk score per domain and subsidiary, trended over time, with the specific controls that move it up or down.

Audit-ready evidence

Controls mapped to frameworks

DMARC, SPF, DKIM, TLS-RPT and BIMI evidence auto-mapped to ISO 27001, SOC 2, NIS2, DORA and PCI DSS 4.0, exportable for any audit.

Impersonation & BEC

Prove you closed the gap

Every lookalike domain and spoof attempt is captured, evidenced and taken down, so brand-impersonation risk is owned, not assumed.

The stakes

The exposure you are accountable for

Email is still the number one way attackers get in. The numbers are consistent across every major industry report.

0%

of data breaches begin with phishing

Verizon DBIR 2024

$0.00M

average cost of a data breach worldwide

IBM Cost of a Data Breach 2024

$0.00B

lost to business email compromise in a single year

FBI IC3 2024

[ How it works ]

From unprotected to enforced, in three moves

No migration, no mail-flow risk. Connect once, see everything sending as you, then enforce on live evidence.

1

Connect your domain

Delegate to EmailAuth with a single CNAME. No mail-flow change, no migration, no risk to what already sends.

2

See every sender

Aggregate RUA and forensic RUF telemetry reveals every service sending as you, plus every spoof and lookalike targeting your brand.

3

Enforce with confidence

Ramp to p=reject on live evidence, flatten SPF with SmartSPF, and file takedowns, without dropping a single legitimate message.

[ Board-ready in 15 seconds ]

Quantify Your Domain's Email Risk

Enter any domain your organization owns and get an executive posture score with the exact control gaps behind it. No agent, no login, nothing stored.

[ Governance model ]

Continuous Control, Full Audit Trail

Every enforcement decision is logged, delegated and reversible. Ownership stays with your team while the evidence assembles itself for the next audit.

Aggregate (RUA) XML Processing

Ingest and normalize multi-ISP aggregate reports from Google, Microsoft, Yahoo, Comcast and 200+ receivers into a single deduplicated timeline with sender classification.

RFC 7489Multi-ISPSender classification

SPF/DKIM Alignment Matrix

Per-source matrix of SPF result, DKIM result, identifier alignment and disposition, so you can promote to p=reject without dropping a single legitimate stream.

Relaxed / strictDispositionVolume trend

Forensic (RUF) RFC 6591 Engine

Capture targeted phishing attempts the moment a receiver emits an AFRF failure report, with full header chain, originating IP and authentication verdict.

RFC 6591 AFRFHeader chainReal-time

Automated PII Redaction

Sensitive subjects, bodies and recipient identities are masked at ingestion so forensic evidence stays usable under GDPR and HIPAA retention rules.

GDPRHIPAAMasked at ingest

TLS-RPT Failure Telemetry

Surface cipher mismatches, expired certificates, STARTTLS downgrades and MTA-STS policy dropouts with the failing receiving MTA identified.

RFC 8460Cipher mismatchMTA-STS dropout

Normalized Event Schema

Every parsed report becomes a queryable event object, ready for dashboards, scheduled executive PDFs, or streaming out to your SIEM.

JSON eventsQuery APIScheduled reports

[ Brand & BEC risk ]

Impersonation Risk You Can Evidence

Board members ask whether you would know when the company is being impersonated. This is how you answer yes, with proof and a takedown trail.

Homoglyph & Lookalike Domain Detection

Continuous registration monitoring flags any domain with ≥90% string proximity to your brand, including Unicode homoglyphs and ligature swaps.

  • acme-c0rp.com

    Homoglyph 0/o · registrar NameSilo

    96% match

  • acrne-corp.com

    Ligature rn/m · registrar PDR Ltd

    93% match

  • acme-corp.co

    TLD squat · registrar Tucows

    91% match

100+ DNS Blocklists (RBL)

100+blocklists polled continuously
✓ clean · polling Spamhaus ZEN

Shadow IT Sender Discovery

Unauthorized third-party mailers sending as your domain, fingerprinted from aggregate telemetry.

  • Salesforce Marketing Cloud18,402/30dUnauthorized
  • SendGrid6,918/30dPending approval
  • Mailchimp2,104/30dUnauthorized
  • Zendesk874/30dApproved

Inbound M365 Telemetry Ingestion

0.00M

Inbound messages analyzed

0

Phishing hitting employee inboxes

0

Auto-quarantined by policy

Graph API connector surfaces spear-phishing aimed at named executives, correlated with outbound DMARC failures.

[ Assurance & reporting ]

Reporting Where Governance Already Lives

Stream authenticated risk events to your SIEM and GRC, brief the board on a schedule, and keep regulated data inside your perimeter when policy demands.

Multi-Channel Notifications

  • WhatsApp

    Critical enforcement alerts to on-call responders

  • Microsoft Teams

    Per-tenant channel cards with policy diffs

  • Slack

    Threaded incident updates and takedown status

Enterprise SIEM Streaming

REST APISyslogSTIX-TAXII

  • Splunk

    HEC ingestion of normalized DMARC events

  • Microsoft Sentinel

    Native connector with analytics rules

  • IBM QRadar

    Syslog LEEF stream with offense mapping

MSSP Partner Portal

  • White-label logo & palette customizer per client
  • Super Admin console with delegated RBAC
  • Instant client tenant switcher across portfolios

Single-Click On-Premises Appliance

Footprint
8 vCPU / 32 GB
Storage
500 GB NVMe
Runtime
Hardened container
Updates
Automated code & patch

[ Control coverage ]

Capabilities, Priority & Deployment Mode

The full control set, how we sequence rollout against your risk register, and where each control can run to satisfy data-residency requirements.

Feature DomainCapabilitiesImplementation PriorityDeployment Mode
Aggregate Reporting (RUA)Multi-ISP XML ingestion, sender classification, SPF/DKIM alignment matrixPriority 1Cloud SaaS + On-Premises
Forensic Reporting (RUF)RFC 6591 AFRF parsing, targeted phishing capture, automated PII redactionPriority 1Cloud SaaS + On-Premises
SmartSPF™ FlatteningDynamic 10-lookup resolution, scheduled 3rd-party IP sync, macro fallbackPriority 1Cloud SaaS
Hosted Policy ManagerCNAME-delegated DMARC/SPF/DKIM record control, zero DNS freeze windowsPriority 1Cloud SaaS
TLS-RPT & MTA-STSCipher mismatch telemetry, policy hosting, HTTPS enforcement monitoringPriority 3Cloud SaaS + On-Premises
BIMI & VMCHosted BIMI records, SVG Tiny-PS converter, VMC certificate chain checksPriority 3Cloud SaaS
Threat HuntingHomoglyph detection ≥90% proximity, 100+ RBL polling, 1-click abuse takedownPriority 1Cloud SaaS + On-Premises
Shadow IT DiscoveryUnauthorized third-party sender fingerprinting and approval workflowPriority 3Cloud SaaS
SIEM StreamingREST API, Syslog, STIX-TAXII push to Splunk, Sentinel, QRadarPriority 3Cloud SaaS + On-Premises
Domain Health ScannerPublic posture scan, header analyzer, record lint & DNS propagation checkFree Community ToolsCloud SaaS
MSSP Multi-TenancyWhite-label branding, super admin console, tenant switcher, delegated RBACPriority 1Cloud SaaS + On-Premises
Appliance Lifecycle1-click installer, air-gapped operation, automated code & patch updatesPriority 3On-Premises Appliance

[ FAQ ]

Questions security and IT teams ask us

Straight answers on DMARC, SmartSPF, deployment and impersonation defense.

Walk into the board meeting with a number, not a hunch

A 14-day proof of concept delivers a quantified email-risk baseline for your primary domains, mapped to the frameworks you already report against.

Run a Risk Scan