EMAIL SECURITY
Email remains the number-one entry point for attackers. Attack Insights assesses your email security posture from the outside, finding the domain and authentication weaknesses that let attackers impersonate your brand and reach your people.
THE BASICS
Your email security posture is how well your domains are protected against being used to impersonate you. It is governed largely by three email authentication standards — SPF, DKIM and DMARC — that let receiving servers verify a message really came from you. When these are missing or misconfigured, attackers can spoof your domain to phish your customers, partners and staff. Attack Insights continuously checks your email-related configuration from the outside and flags the gaps attackers abuse.
WHY IT MATTERS
Most successful attacks begin with a convincing email. A spoofable domain hands attackers a trusted disguise — and the reputational damage lands on you.
COVERAGE
Presence, validity and overly permissive configurations.
Whether mail is signed and keys are valid.
Presence and enforcement level (none, quarantine, reject).
Domains that can be impersonated due to weak config.
Typosquatting domains used to phish your brand.
Mail servers and interfaces exposed to the internet.
MTA-STS and TLS configuration for mail in transit.
Misconfigured servers that can be abused to send mail.
CAPABILITIES
Continuously validate email authentication configuration and enforcement across all your domains.
Detect domains vulnerable to spoofing and look-alike domains used to phish your brand.
Surface exposed mail services and transport misconfigurations attackers can abuse.
HOW IT WORKS
Identify your sending domains and mail infrastructure.
Check SPF, DKIM, DMARC and exposure for each.
Flag spoofable domains and the highest-risk gaps.
Continuously re-check as domains and senders change.
USE CASES
Stop attackers spoofing your domain to phish your customers.
Harden authentication to cut business email compromise.
THE PLATFORM
FAQ
They are email authentication standards. SPF defines which servers may send mail for your domain, DKIM cryptographically signs your mail, and DMARC tells receivers what to do when checks fail. Together they prevent attackers from spoofing your domain.
Without an enforced DMARC policy (quarantine or reject), receiving servers may still deliver spoofed mail that appears to come from you. Enforcement is the key control against domain impersonation.
No. Checks are performed externally against your public DNS and mail configuration, with no access required.
Yes. Attack Insights identifies typosquatting and look-alike domains used to impersonate your brand, alongside your authentication posture.
Continuously, so new or changed domains and senders are assessed as they appear.
Find and fix the gaps that let attackers impersonate your domains.
