Guides

When a DMARC report shows no passes from a known mail service
A DMARC report can look alarming when it records zero passing messages from a mail service your organisation genuinely uses. It may show that Google Workspace,…
How to set alerts for a falling domain trust score
A domain can have a strong reputation today and become a security concern tomorrow. Expired authentication records, a compromised mailbox, a sudden increase in…
Why SPF approval is not enough when an IP is blacklisted
An email can pass SPF and still deserve to be blocked. SPF confirms that the sending IP is authorised to send for a domain, but it does not prove that the…
How Australians Can Check Whether a Bank Email Is Genuine
A convincing bank email can arrive while you are travelling through Brisbane, paying a tradie in Perth, or checking your phone on the Sydney train. Scammers…
What a Recently Changed MX Record and Low Trust Score Suggest
A domain with a recently changed MX record and a low trust score deserves careful attention. It may reflect a legitimate migration between email providers, but…
How to Build a Dashboard That Tracks Your Organisation’s Domain Trust Score
A domain trust dashboard turns scattered email security signals into a record your team can understand over time. It can show whether authentication is…
When valid DKIM signatures support phishing attacks
A valid DKIM signature can create a false sense of security. It proves that an authorised system signed an email and that the signed content has not been…
How to Flag DMARC Alignment Failures with an API
DMARC alignment determines whether the domain visible to recipients in the From address matches the domain authenticated by SPF or DKIM. A message can pass one…
Missing SPF Records and What They Reveal About Your Security Posture
When a critical business domain publishes no Sender Policy Framework record, it broadcasts more than a technical gap. It signals that email authentication has…
Spotting phishing campaigns hidden in unmonitored subdomains
Phishing remains one of the most persistent cyber threats facing Australian businesses and households. According to the Australian Cyber Security Centre,…