Email security that actually makes sense
Poscha gives you SPF flattening, DMARC analytics, and TLS-RPT monitoring in one platform. Built for MSPs and security teams who need clarity, not complexity.
Email security is a mess of disconnected tools
SPF records hit the 10-lookup limit. DMARC reports land in inboxes no one reads. TLS-RPT data gets ignored. Meanwhile, phishing attacks get more sophisticated every quarter.
SPF records that break silently
Every vendor you add moves you closer to the DNS lookup limit. When you hit it, delivery fails, and you find out from angry users.
DMARC reports nobody reads
XML aggregate reports pile up in a shared mailbox. Nobody has time to parse them, so you miss spoofing attempts in plain sight.
No visibility into who's sending
Marketing uses SendGrid. HR uses Workday. Finance uses DocuSign. You have no idea what's actually being sent from your domain.
One platform for email authentication and analytics
Poscha handles SPF flattening, DMARC aggregation, and TLS-RPT monitoring in a single dashboard. See everything that matters, act on what's important.
SPF Flattening
Automatic expansion and chaining of include mechanisms. Never hit the 10-lookup limit again, even as your stack grows.
- Automatic hourly re-expansion
- Chained at 510 bytes per record
- Alerts on upstream SPF changes
DMARC Analytics
Aggregate XML reports are parsed and turned into actionable insights. See who's sending, where, and whether they're aligned.
- PTR and organisation enrichment
- Grouped by known sending services
- Pass/fail trends over time
TLS-RPT Monitoring
Know when TLS delivery to or from your domain fails. Catch misconfigured MTAs before they become a deliverability problem.
- MTA-STS policy monitoring
- Failure alerts with context
- Policy drift detection
Multi-Tenant by Design
Built for MSPs from day one. Manage unlimited customers under a hierarchical structure with per-tenant billing and access controls.
- Distributor, MSP, customer hierarchy
- Role-based access with scopes
- Custom MSP branded tiers
Known Sender Intelligence
Community-maintained database of known sending services. Know instantly if that IP is SendGrid, Mailchimp, or something suspicious.
- DKIM alignment tracking
- SPF alignment status
- Links to vendor setup guides
Fast Onboarding
Sign up, add your domain, redirect your DMARC reports. You're analysing data within minutes, not weeks. No implementation team required.
- Self-service signup
- Guided domain setup
- Data flowing in under an hour
How Poscha simplifies cyber security
Reduce phishing exposure
When DMARC is at reject and you can see every legitimate sender, blocking spoofed mail becomes safe. Poscha shows you exactly what needs alignment before you tighten the policy.
Prevent delivery failures
SPF flattening means you never hit the 10-lookup limit. Hourly re-expansion catches upstream changes before they break your outbound mail.
Shadow IT visibility
Marketing spins up a new email tool without telling you. Poscha sees it in the DMARC data within hours, not months. Every sending IP is enriched and classified.
Compliance evidence
Essential Eight, APRA CPS 234, NIST - all require email authentication controls. Poscha generates the evidence you need without the spreadsheet gymnastics.
Operational efficiency
Stop paying three vendors for what one platform should do. SPF, DMARC, and TLS-RPT belong together because they solve the same problem.
Managed for you
Updates, scaling, and infrastructure are our problem. You focus on acting on the data. No servers to patch, no databases to tune, no dependencies to chase.
From setup to insight in under an hour
Add your domain
Enter your domain, define your SPF includes, and Poscha generates a flattened TXT record chain. Point your SPF at the chain and you're protected.
Redirect your DMARC
Update your DMARC rua tag to point to your unique Poscha address. Reports start flowing and get parsed automatically.
Review and act
Source analysis groups every sending IP by known service and registered domain. Align the legitimate ones, investigate the rest, tighten your DMARC policy with confidence.
Simple, transparent pricing
Start free. Scale when you need to.
Free
Perfect for testing and small deployments
- 1 domain
- 30 days retention
- SPF flattening
- DMARC analytics
- Community support
Pro
For growing businesses and IT teams
- 3 domains
- 90 days retention
- All SPF and DMARC features
- TLS-RPT monitoring
- Alert rules
- Email support
Enterprise
MSPs and large organisations
- Unlimited domains
- 365 days retention
- Multi-tenant hierarchy
- Custom MSP tiers
- Priority support
- Dedicated account manager
Ready to simplify your email security?
Get early access to Poscha. See what your DMARC data has been trying to tell you.
Get Early Access