trustyourinbox

Twenty years in email security. Now yours to run.

Trusting your email security to a company you've never heard of is a big ask. Meet the team behind this one.

DMARC has existed since 2012. Most tools for it still look like 2012.

A small business owner does not have a SOC team. They have a Tuesday afternoon and a domain that needs to keep landing in inboxes.

See where your domain stands
  1. 2012
    The standard arrives. Built by the industry's biggest senders and receivers. The tooling that grew up around it pointed one way: SOC teams, raw XML, and pricing pages that open with “contact sales.”
  2. 2024
    The mandate lands. Gmail and Yahoo introduce authentication requirements, including DMARC for bulk senders. Smaller senders have reason to pay attention too: knowing who sends as your domain matters at any volume.
  3. 2025
    Microsoft follows. Microsoft adds authentication requirements for high-volume senders to Outlook.com. More businesses now need to understand the DNS records behind their invoices, quotes, and newsletters.

The road here. Where a career spent inside email security ended up.

Dinesh Mistry, founder of trustyourinboxDinesh Mistry Founder Connect on LinkedIn
  1. The first decade

    Learning how attacks land.

    Solutions engineering at McAfee and Bromium, in the rooms where enterprises fought malware and phishing. The lesson that stuck: a security product fails the moment the person running it needs a manual.

  2. 2016

    Agari, where DMARC grew up.

    Agari's founders helped create the DMARC standard itself. Dinesh joined as a sales engineer and sat with some of the world's biggest brands while they rolled it out, then moved into product management because he kept pulling what customers actually needed back into the product. Year after year, he watched enforcement help block mail spoofing those brands' domains, one Fortune 500 deployment at a time.

  3. 2024

    The rules changed for bulk senders.

    Google and Yahoo made DMARC mandatory for bulk senders, and Microsoft followed in 2025. Smaller businesses needed a practical way to meet those requirements and protect their domains, without an enterprise deployment.

  4. Today

    The same playbook, self-serve.

    That enterprise deployment experience, rebuilt as a product one person can run: plain English, public pricing, one-click fixes, free for one domain.

From the founder.

I spent my years at Agari on both sides of the same table. As a sales engineer I sat with customers while they untangled their sending, and later, in product management, I built what those rooms kept asking for. The pattern never changed: DMARC works. Enforcement helps block mail that spoofs your domain. But getting there took an enterprise contract, a deployment team, and months.

When Google and Yahoo introduced their 2024 sender requirements, including DMARC for bulk senders, the problem I had spent a decade on reached more businesses. The DNS records behind their invoices, quotes, and newsletters became harder to ignore. The tools I knew were priced and built for enterprises, and I kept thinking about everyone else.

So this is my answer: the playbook I walked Fortune 500 brands through, rebuilt so you can run it yourself in an afternoon. There is no sales team, because I do not want one. And if you write to support, there is a good chance you are talking to me.

Dinesh Mistry Founder, trustyourinbox · LinkedIn

Our mission.

Make email authentication legible. A small business deserves the same deliverability, and the same protection from people spoofing its domain, as a Fortune 500, without the consulting fee, the sales call, or the dashboard that needs a manual.

Have a question before you start? .

Start with one domain. See it with your own data.

Free for one domain, no card. Add one DNS record and the first reports usually arrive within a day.

  1. Monitoring
  2. Quarantine
  3. Reject