Changelog

October 2026 and earlier

Everything that was running by the end of October 2026, grouped by what it does. From the next month on, each month gets its own heading with the changes made in it.

Reports and sources

• Reports that mailbox providers send about your domain go to a reporting address of its own and are read as soon as they arrive. This covers aggregate reports, TLS reports and forensic reports.
• Every report keeps its raw XML, and you can download it at any time.
• Each source is named after the service behind it, such as Mailchimp or Google Workspace.
• Each source comes with a plain explanation of whether it passes DMARC, why it fails and what to change.
• Reports are listed by the mailbox provider that sent them and by period, and one report opens parsed or raw.
• A forensic report can be kept whole or with the message redacted. Choosing redacted deletes the original.

DNS records and readiness

• We check the DMARC, SPF, DKIM, MTA-STS and BIMI records of each domain on a schedule, and count the DNS lookups your SPF record uses.
• Every change to a domain's records is kept, so you can see what changed and when.
• A domain page writes the DMARC and TLS reporting records for you and merges them with what is already published.
• A domain shows its readiness for a stricter policy: the rule, each condition, how far you are and the next step.
• A DKIM selector that stops appearing in DNS is recorded and shown.

Setup guides

• A step-by-step guide for each service we recognise that sends as your domain, written from the service's own documentation. You open it from the source's page.
• Guides for the jobs that belong to no one service: setting up DKIM, checking a DKIM key, fixing SPF, handling an unknown source and moving to a stricter DMARC policy.

Alerts and the weekly digest

• Alerts for a failing record, a new source, a spike in failures, a TLS problem and a domain that has reached readiness.
• Alerts arrive by email, and by Slack, Microsoft Teams, Discord, Google Chat, Mattermost, Telegram, PagerDuty or a webhook.
• Email alerts are gathered into at most one an hour for each member, in that member's language.
• A digest on Monday morning shows each domain's week and one next step.
• Every alert and digest email can be stopped with one click.

Connecting other tools

• A read-only API with tokens you create under Developer settings, and an API reference.
• A connection for AI assistants that speak MCP, a standard way for an assistant to use a tool. They read your domains and sources and explain them in your organization's language, and they ask for your consent first.
• Webhooks for new reports, alert changes and API exports.
• Each new report can be forwarded to a second address you confirm.
• A read-only view of one domain, shared through a link, that needs no sign-in.

Account and data

• Sign in with a password and add an authenticator app, recovery codes or a passkey as a second step.
• Invite members by email, as admins or as viewers.
• Admins can download everything the organization holds, and delete everything. Deletion is final after 30 days.
• Each person can download their own data and delete their account.
• The product is available in English and Finnish.

Plans

• The pricing page shows every plan with its limits, including how long reports are kept and how often DNS is checked.
• Moving to a smaller plan gives you time to choose what stays, and a list of what you lose.

This website

• Guides to DMARC, SPF and DKIM, and to what Google, Yahoo and Microsoft ask of senders.
• Pages for business owners, marketing teams, IT teams and agencies.
• A security page, an about page, and a support page with a form. A person writes each answer.
• Terms of service, payment terms and a privacy policy, each on its own page.
• Every page is also in Finnish.