What shipped, dated.

Every SPF include and DKIM key you've ever granted is standing permission to send as you, and it normally outlives the vendor it was for. The new Access review (on each domain's Senders tab) crosses your record against 90 days of real traffic and names the grants nothing uses. Unused include? Remove it in one click, with a coverage proof up front and a 24 hour undo. Pro and up; the grant-by-grant table is on every plan.

Enforcement stops forged mail from your domain, so attackers register one that looks like it instead. Every protected domain now has a Lookalikes tab: a weekly scan of close variations, graded by what each one is set up to do, plus any lookalike your DMARC reports already caught sending as you. Scanning is on Lite and up.

Run your own mail signer? The DKIM tab's new rotation guide generates a 2048-bit key in your browser (we never see the private half), publishes it in one click, and retires the old key only after receivers' reports confirm the new one is signing. On all plans.

Send a client's monthly report for real and see whether it landed, put your own postal address on branded mail, mark what came of a prospect, and preview a CSV import before it creates anything.

The MSP tier is live: one console for your whole client book, white label portal and reports on your own domain, a partner API with CSV import, and published per domain pricing from $2 a month. Monitor only domains are free.

DNS can only imply you meet the Google, Yahoo, and Microsoft bulk-sender rules. Your workspace now has a private probe address: subscribe it to your streams and every message is graded header by header, one-click unsubscribe included. A gap flips your compliance card with the exact evidence; clean streams earn a Proven by your mail mark. Lite and up.

Enforcement Preview replays your last 30 days of receiver reports under a stricter DMARC policy, flips it in one click, and watches for 14 days with a one-click rollback if your own mail regresses.

Email bounced or landed in junk? Forward it to your workspace's private diagnose address (or paste its headers) and get one plain-English verdict: the cause, the evidence from up to eight sources, what we ruled out, and a one-click fix when one exists - then a recovery watch confirms from the receivers' own reports once mail passes again. On all paid plans, from the new Diagnose page.

Send a test email to our free tester and watch it arrive: the route it took, a sealed grade record with honor marks, and a ladder of fixes. Shared links now unfurl with your real seal and score.

Open, follow, and reply to support conversations at support.trustyourinbox.com - same sign-in as the app, attachments included, and email replies stay on the same thread.

Critical issues and DNS-fix updates now reach you the moment a scan sees them: an instant email on any paid plan, or a signed webhook to your systems on Pro. Turn it on in Settings.

Send from your own servers or a smarthost? Create a sender with a name, its IP ranges, and an icon. That mail then shows under your name in past and future reports, instead of as an unknown source.

Turn your DMARC data into a plain-English report and have it sent to your board, leadership, or cyber-insurer every month. Preview it and save a PDF any time from Settings.

Once a domain is enforcing DMARC, a new BIMI tab shows whether your logo is set up to appear beside your mail in Gmail, Yahoo, and Apple Mail, and walks you through publishing it.

Mint an API key (Pro and up) to pull your domains, reports, senders, and issues into your own scripts and dashboards. Now you can make changes too: add domains, stage one-click DNS fixes, and dismiss issues.

Connect Slack and we'll post the alerts that matter (a new spoofing sender, a domain that isn't protected, a fix that just applied) straight to your channel. When something is one-click-fixable, tap Fix this right in the message to stage it through the same safety net you get in the app: a 5-minute hold, a cancel button, and a 24-hour undo. Connect in Settings -> Integrations -> Slack.

Every domain now has a Subdomains tab showing which subdomains send mail as you: the ones you know, the ones worth a look, and the ones that aren't in your DNS. We'll flag the unfamiliar ones in your action inbox so you can tell a forgotten tool from a forgery.

DMARC became an official internet standard in May 2026. Each domain's DMARC tab now shows whether your record is current, plus a safe one-line change that blocks spoofing of subdomains you never created.

Send a bug, idea, or question from the help button and we'll reply straight to your inbox. Reply to our email any time to keep the conversation going.

Connect AWS and we publish the ownership record for you, no copy-paste.

Connected over MCP, it can now tell forwarding from real failures, show how Gmail vs Outlook see you, dig into your DKIM keys and BIMI logo, check reverse DNS, and label unknown senders for you.

When you give an MCP token write access, every change your assistant makes is now labeled with the token's name in your audit log and domain history, so you can always tell it apart from your own.

Connect Claude or Cursor over MCP and it can attach your workspace health, action inbox, or a single domain's posture as context, and suggest your real domain names as you type.

Create a write-enabled MCP token and your AI assistant can dismiss issues, re-check DNS, and stage one-click DNS fixes for you. Fixes still go through the same 5-minute delay, email notice, and 24-hour undo. New guided prompts also help it investigate spoofing or plan your path to enforcement.

Connect Claude, Cursor, or any MCP client to your workspace and ask questions like 'how much spoof mail did my domain get last week.' It is read-only and scoped to your data.

Cover up to 5 domains for $9/mo on the new Lite plan. Prefer to pay yearly? Switch any plan to annual billing and save over 20%.

Click the megaphone in the top bar to browse product updates in a quick slide-over, right where you are.

Your notification bell is now wired up. Product updates and important account alerts will show here.