Changelog

Managed MTA-STS hosting

Enforce TLS for your inbound mail without running a policy server. Two CNAMEs and we do the rest: the policy file served over HTTPS with a certificate for your domain, and the policy id bumped automatically on every change so receivers always pick up updates. Policies start in testing mode, and switching to enforce checks your live MX records first — a misconfigured policy can't silently block your mail.

Managed BIMI logo & VMC hosting

Upload your logo SVG and Verified Mark Certificate — we validate them against the BIMI security profile, host both over HTTPS, and publish the BIMI record behind a single CNAME. Replacing the logo or adding a VMC later never touches your DNS again.

Delegation monitoring across all hosted records

Hourly end-to-end checks on every hosted record — DMARC, SPF, DKIM, MTA-STS and BIMI — with alerts the moment a delegation breaks.

Hosted SPF flattening

Point a single include at DDMARC and we resolve your SPF sources to IP addresses, serve the flattened record with a 5-minute TTL, and re-resolve every 30 minutes — no more 10-lookup failures, no chasing provider IP changes. If a refresh ever fails, we keep serving your last known-good record and alert you.

Hosted DKIM keys

Generate a DKIM key in one click: we serve the public key from our zone, you install the private key on your mail server (shown once, never stored by us). Rotations publish a new selector alongside the old — one CNAME per selector, and your DNS never changes again.

Delegation monitoring

If your SPF include or a DKIM CNAME ever stops pointing at your hosted records, you get a critical alert before deliverability suffers.

Smart provider guidance

Domains sending through Google Workspace or Microsoft 365 are steered to those providers' native DKIM, with hosted DKIM recommended for your other senders.

Hosted DMARC management (GA)

Delegate _dmarc via a single CNAME and manage your DMARC policy from the dashboard — including scheduled, gradual policy ramp-up to p=reject.

Sender identification

Sending sources are automatically labeled with the email service behind them (Google Workspace, SendGrid, Mailchimp, and more), with confidence-aware labeling that never guesses.

Guided DNS fixes

Every failing sender now comes with the exact, copyable DNS change that fixes it — the precise SPF include to add and the provider's DKIM setup steps. You stay in control: changes are applied in your DNS, never ours.

Volume & new-sender alert rules

Alert on email volume spikes or drops versus your domain's 7-day baseline, and on never-before-seen sending sources — delivered to email, Slack, Teams, Telegram, or webhooks.

Compliance posture PDF

One-click executive PDF summarizing your domains' DMARC, SPF, DKIM, TLS-RPT, and MTA-STS posture.

Scheduled DNS checks on every plan

Scheduled DNS monitoring is now included on the free Monitor plan; forensic (RUF) reports are included from Protect up.

Japan region now available

New Tokyo data center for Asia-Pacific customers with sub-50ms latency.

Canada region launched

Montreal data center for Canadian data residency requirements.

Reduced API latency by 40%

Optimized database queries and added regional caching.

Fixed timezone display in reports

Slack and Microsoft Teams integrations

Receive alerts directly in your team chat.

Custom alert rules

Create alerts based on specific conditions like authentication failure rates.

Alert digest mode

Get daily or weekly summaries instead of individual alerts.

Reduced false positive alerts by 60%

Fixed duplicate alert notifications

Interactive trend charts

Drill down into authentication data with clickable charts.

Source IP geolocation mapping

See where your email is being sent from on a world map.

Export reports to PDF

Generate professional PDF reports for stakeholders.

Dashboard load time reduced by 50%

Added dark mode support

Role-based access control (RBAC)

Admin, Editor, and Viewer roles with granular permissions.

Team activity log

See who made changes and when.

Shared saved views

Save and share custom dashboard views with your team.

Added SSO support for Google Workspace

Completely redesigned dashboard

Modern, intuitive interface built for speed and usability.

Real-time report processing

See DMARC reports within minutes of receiving them.

MTA-STS and BIMI support

Full support for modern email security standards.

API v2 with GraphQL

Powerful new API for custom integrations.

SOC 2 Type II certification achieved

End-to-end encryption for all data

Interactive DNS record generator

Generate correct DNS records based on your email infrastructure.

Configuration validation

Instant verification that your records are correct.

Added guides for 50+ DNS providers

Fixed SPF include limit calculation

SAML SSO support

Integrate with Okta, Azure AD, OneLogin, and more.

IP allowlisting

Restrict dashboard access to specific IP addresses.

Audit logs

Detailed logs of all account activity.

ISO 27001 certification achieved