Features

⚡

SPF lookup guardrails

A live counter shows exactly how many of your 10 allowed DNS lookups each mechanism consumes. We flag you as you approach the ceiling — not after a permerror has already dropped your SPF protection.

🧩

Automatic SPF flattening

Resolve every include, a, and mx mechanism down to the IP ranges it authorizes, then publish a flat record that costs almost no lookups. Re-resolved on a schedule and rotated when providers change their IPs.

🛟

Safe-publish guardrails

Multi-resolver quorum, shrink detection, never-publish-on-partial, last-known-good retention, and grace windows ensure a bad upstream response can never silently break your outbound mail.

📊

Sender change feed

A dated, attributed timeline of every change your providers make to your SPF surface — ranges added and removed — so you always know what's moving underneath you.

🔔

Real-time alerts

Email and webhook notifications for provider IP changes, record drift, invalid policies, and expiring configurations. Tune severity so you only hear about what matters.

🛡️

DKIM & DMARC validation

Check your DKIM selectors and DMARC policy alongside SPF. Spot a p=none policy, a missing selector, or an alignment problem before it costs you reputation.

🧭

Guided recommendations

Plain-language fixes ranked by impact: remove dead includes, delegate subdomains, consolidate overlapping providers, or flatten. No RFC reading required.

🗂️

Audit log

Every republish, every change, every alert — recorded with a full diff, so any deliverability incident can be traced back to the exact change that caused it.

Built for the way email actually breaks

SPF doesn't fail loudly. It fails the moment a provider you authorized quietly changes an IP, or the day your eleventh include tips you over the lookup limit. By then the damage is already in your bounce logs.

Mailbox Radar is designed around that reality: continuous monitoring, automatic repair where it's safe, and clear alerts where a human needs to decide.

Works with any DNS provider via delegation or API
Monitors unlimited subdomains and sending streams
Backend and admin run on your own infrastructure

example.com  TXT
  "v=spf1 redirect=spf.mr.example.com"

spf.mr.example.com  TXT   (managed by Mailbox Radar)
  "v=spf1 ip4:... ip4:...
   include:_c1.spf.mr.example.com ~all"

✓ 2 / 10 lookups
✓ last verified 4 min ago
✓ 0 open deliverability issues