🐾 Spoofhound

Know who's sending email as your domain.

Spoofhound turns the DMARC and TLS reports your domains already generate into a clear picture: who's sending legitimately, who's spoofing you, and exactly what to do next — all the way to full enforcement.

Invite-only beta · no card, no agents, nothing to install — just DNS.

Anyone can put your domain in the From line.

Until DMARC is enforced, receivers deliver mail that merely claims to be you. The reports that reveal this — DMARC aggregate, forensic, and SMTP TLS reports — arrive as zipped XML and JSON that nobody reads. Spoofhound reads them for you, every day, and only speaks up when something needs a decision.

  • Legitimate senders passing authentication
  • Forwarders breaking SPF in transit (normal, explained)
  • Unknown sources spoofing your domain right now
  • Mail servers silently failing to negotiate TLS

Monitoring that tells you what to do, not just what happened.

Triage-first dashboard

Open to a queue of things needing attention — not a wall of charts. Every alarm ships with a runbook line: what it means and what to do about it.

Spoofing detection

New sending sources are baselined automatically; a brand-new IP failing alignment — the classic spoofing signature — pages you the same day.

Enforcement wizard

The codified path from p=none to p=reject: a 98% aligned-pass gate over a rolling window, plus an "all sources explained" check, with a staged recommendation.

TLS-RPT health scores

Every domain graded A–F on its mail-transport security: MTA-STS mode as receivers observed it, DANE evidence, and failure rates with severity tiers.

Hosted BIMI

Your logo in supporting inboxes: we validate it against the BIMI SVG profile, host it with your certificate, and hand you the exact DNS record to publish.

Alerts with a lifecycle

Alarm → reminder → resolved, with suppression so a known problem doesn't page you daily — plus a Monday digest of the week that actually reads well.

Live in three DNS records.

1

Verify your domain

Publish one TXT record to prove ownership. A domain belongs to exactly one account — always.

2

Point your reports at us

The Setup page shows your current DMARC and TLS-RPT records with Spoofhound appended — copy, paste, done. Runs happily alongside any existing report processor.

3

Get answers, not XML

Reports typically start within a day. Dashboards fill, alarms guard, and the wizard tells you when you're ready to enforce.

Already have history with another processor? Upload your old report emails and files — Spoofhound backfills months of data in minutes.

Stop guessing who sends as you.

Spoofhound is in invite-only beta. Tell us about your domains and we'll get back to you.

Request an invite