Features Overview

MailShield provides comprehensive email security monitoring through a suite of integrated features.

Core Features

DNS Security Monitoring

Continuous monitoring of all email-related DNS records:

Protocol	Description
SPF	Sender Policy Framework validation
DKIM	DomainKeys Identified Mail verification
DMARC	Domain-based Message Authentication
MTA-STS	Mail Transfer Agent Strict Transport Security
TLS-RPT	TLS Reporting
BIMI	Brand Indicators for Message Identification
DNSSEC	DNS Security Extensions

Learn more about DNS Monitoring →

Security Scoring

A comprehensive scoring system that evaluates your email security:

• 0-100 score with letter grades (A-F)
• Weighted categories based on security importance
• Improvement suggestions to increase your score
• Historical tracking to see progress over time

Learn more about Security Score →

Report Processing

Automatic ingestion and analysis of email security reports:

• DMARC Aggregate Reports: Daily summaries from ISPs
• DMARC Forensic Reports: Individual failure details
• TLS-RPT Reports: TLS connection statistics

Learn more about Report Processing →

Alerts & Notifications

Stay informed about your email security:

• Score change alerts: When security posture changes
• DNS change detection: When records are modified
• Report alerts: When authentication failures spike
• Scheduled summaries: Weekly and monthly reports

Learn more about Alerts →

MTA-STS Hosting

Simplified MTA-STS deployment:

• Policy hosting: MailShield hosts your MTA-STS policy
• Configuration UI: Easy policy management
• Validation: Automatic policy verification

Learn more about MTA-STS Hosting →

Team Collaboration

Multi-User Organizations

Work together on email security:

• Role-based access: Owner, Admin, Member roles
• Team invitations: Email-based invite system
• Shared visibility: Everyone sees the same data

Per-User Notifications

Each team member controls their own notifications:

• Configure which alerts to receive
• Choose email vs. in-app notifications
• Set personal notification preferences

Platform Capabilities

Automatic Discovery

MailShield automatically discovers:

• DKIM selectors from DMARC reports
• Mail servers from MX records
• Email providers from SPF includes

Provider Detection

Recognizes common email services:

• Google Workspace
• Microsoft 365
• Amazon SES
• SendGrid, Mailchimp, Postmark
• And many more

SPF Include Tree

Visualize complex SPF configurations:

• Nested include expansion
• DNS lookup counting
• Provider identification
• Validation at each level

Historical Data

Track changes over time:

• Score history graphs
• DNS record history
• Report archives
• Alert history

Integration Points

DMARC Reporting

Receive reports at your custom MailShield address:

rua=mailto:your-id@reports.mailshield.app

Webhook Support

MailShield processes reports via webhook integration with email servers like Postal.

DNS Verification

Verify domain ownership through DNS TXT records.

Security & Privacy

Data Security

• All connections encrypted (TLS)
• Secure authentication (magic links)
• Role-based access control

Privacy

• Reports processed and stored securely
• No email content accessed
• Only metadata and authentication results

Coming Soon

Features on our roadmap:

• API access for automation
• Custom report scheduling
• Advanced analytics dashboard
• Slack/Teams integration
• PDF report generation