Email Posture
A DMARC and MTA-STS reporting service that shows you every source sending as your domain — and gets you to enforcement without breaking legitimate mail.
Email Posture is a DMARC and MTA-STS reporting and processing service. It gives you continuous visibility of every system sending email as your domain, processes the aggregate and failure reports your policy generates, and guides you from monitoring to full enforcement — so spoofed mail is rejected without disrupting the legitimate mail your organisation depends on. It is built for Australian organisations that treat their email domain as a trust boundary, not an afterthought.
What's Included
Complete Visibility
See every legitimate and unauthorised source sending email as your domain. Email Posture maps your sending ecosystem from the reports your DMARC policy generates, so nothing stays hidden.
Spoofing Protection
DMARC enforcement rejects mail that impersonates your domain, closing off the exact-domain spoofing behind most business email compromise and phishing campaigns.
Guided Enforcement
Moving to p=reject is where most deployments stall. Email Posture walks you from monitoring (p=none) to quarantine and reject, identifying and fixing the senders that would otherwise break.
Report Processing
Aggregate (rua) and failure (ruf) reports are ingested and parsed for you. No XML wrangling — just clear findings about who is sending, from where, and whether it authenticates.
Transport Security
MTA-STS and TLS-RPT are monitored alongside DMARC, so mail in transit cannot be silently downgraded or intercepted without you knowing.
Reporting You Can Act On
Plain-English summaries and alerting focused on what changed and what needs attention — designed for decision-makers, not just mail administrators.
How It Works
Publish
We help you publish an initial monitoring policy (p=none) with reporting addresses, establishing visibility without affecting delivery.
Observe
Reports flow in and Email Posture builds a picture of every system sending as your domain — legitimate, shadow, and malicious.
Remediate
We identify unaligned senders and authentication gaps, then work through them methodically so legitimate mail continues to deliver.
Enforce
With the ecosystem understood, you move to quarantine and reject, and add MTA-STS and TLS-RPT to protect mail in transit.
Who It's For
Government & Defence
Impersonation of a government or defence domain is a direct threat to public trust and to the people who rely on your correspondence. Email Posture gives you visibility and enforcement across every sending system, with reporting your team can act on.
Financial Services
Banks, insurers, and financial services firms are among the most impersonated brands in phishing. Email Posture protects your domain from abuse and gives you an evidence trail to demonstrate control.
Critical Infrastructure
Operational and corporate domains alike are targets for espionage and disruption. Email Posture secures the channel attackers use to establish trust before they move.
Any Organisation With An Email Domain
Spoofing, phishing, and fraudulent invoices do not discriminate by size. Email Posture brings enterprise-grade email authentication within reach of any organisation that depends on its domain name.
Ready to take control of your email domain?
Talk to our team about where your domain's email authentication stands today, and what it would take to get to enforcement.