Prevent email downgrade attacks and enforce TLS encryption on inbound mail — Audits RFC 8461 MTA-STS and RFC 8460 TLS Reporting DNS records to protect inbound mail servers from man-in-the-middle interception.
MTA-STS discovery — verifies _mta-sts TXT records and HTTPS policy endpoints.
TLS-RPT monitoring — verifies _smtp._tls TXT records for aggregate TLS failure reports.
Email transport security — prevents cleartext SMTP downgrade and spoofing.
MTA-STS & TLS-RPT Inspector automatically crawls your website using a real headless browser to inspect: MTA-STS discovery — verifies _mta-sts TXT records and HTTPS policy endpoints. TLS-RPT monitoring — verifies _smtp._tls TXT records for aggregate TLS failure reports. Email transport security — prevents cleartext SMTP downgrade and spoofing.
Engineering leads, DevOps teams, SEO specialists, and product managers who need deterministic, evidence-backed inspection reports without generic AI hallucinations.
Our engine launches an isolated browser session, captures exact network requests, response headers, DOM snapshots, and console errors, and maps observable findings to actionable remediation steps.
The free tier audits up to 3 pages instantly (5 free scans/day). Comprehensive full-site reports with deep evidence citations are available for $3.99 per audit.
Prevent spoofing and keep your emails out of the spam folder
Restrict authorized Certificate Authorities and audit DNSSEC cryptographic signing
Harden TLS encryption, HSTS preload compliance, and transport security