Fully automated email authentication monitoring for SMBs & MSPs
Stop email spoofing before it stops you.
MailFortify continuously audits your SPF, DKIM
and DMARC DNS posture, scores it 0–100, and tells you the
exact TXT record to publish next to reach p=reject.
No server access, no analyst in the loop, no credentials ever stored.
Deployed preview on dev.stras.si — the tools behind the login are real.
The problem
Cyber attacks start with a spoofed "from" — a fake invoice, a lookalike supplier, a password reset. Most European SMBs still have no usable DMARC policy, so mail from their own domain is trivially impersonated, their customers get phished, and they only find out at an audit or a claim. This is the control that is cheap, high-impact, and fully automatable — which is exactly why it keeps being ignored.
Feature reel
0–100 posture score
One defensible number for the board, an insurer or a partner audit. Graded A–F with a breakdown your accountant can read.
SPF audit → fix
Flags absent, oversized or permissive v=spf1 records and hands you the exact record to publish.
DKIM selector checks
Finds which selector actually signs your mail and surfaces alignment gaps that break DMARC.
DMARC policy grading
Walks you policy-by-policy from p=none to p=reject with a copy-pasteable TXT value each step.
Aggregate report ingestion
Consumes DMARC RUA reports automatically — polling or upload — and shows who is spoofing you, by sender and result.
Degradation alerts
When a change drops a score, you hear about it — email or log — before it becomes a deliverability incident.
How it works
- Add your root domain. One input, no integration, no credentials.
- MailFortify audits your DNS and starts listening for DMARC aggregate reports on your behalf.
- You get a prioritized fix guide — the exact records to publish — and continuous 0–100 monitoring from then on.
Why this one can be 100% automated
DMARC monitoring is the rare security control an SMB can run with no person in the loop: every input is public DNS, every output is a text record or a report the provider already emits. MailFortify scans on a schedule, ingests reports automatically, and raises the flag only when a remediation needs a human to click "publish". That is the ceiling you want to automate to.
- Agentless & read-only — only public DNS lookups.
- Scheduled scans + automatic RUA report ingestion — nothing to babysit.
- GDPR-friendly: stores only domains and aggregated sender stats, no message content.